N = Microsoft expands patch management with Windows Update Services, but not soon enough for users. PAGE 5 


ALSO ti HT sab) SECT = BrainShare preview: Novell appears to have new lease on life as it treads NetWare-to-Linux path. pace 10 
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Unwary users can 

be locked into bad 
outsourcing deals 
with fuzzy scope, 
high prices and no 
exit strategy. We’ve 
identified 12 HIDDEN 
FRAPS in outsourcing 
contracts and, more 


Amtrak Lags in 
Implementing 
Security Technologies 


Madrid attacks as cus attention on passenger 
rail system's vulnerability, lack of DHS funding 
BY DAN VERTON curity funding earmarked for 


new security technologies at 


NEWSPAPER 


OUTSO 


OIC 


2g RSet 3 


importantly, how to 
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Big Four Accounting Firms 
Join in Cyber-Risk Effort 


Create index to gauge 
firms’ preparedness 


BY JAIKUMAR VIJAYAN 
A consortium of companies 
that includes the Big Four ac- 
counting firms and at least 
one large insurer is quietly 
working on a cybersecurity 
risk measurement framework 
for large enterprises, Comput- 
erworld has learned. 

The Risk Preparedness In- 
dex is being developed by the 
newly formed Global Security 


Consortium, which so far 
includes Pricewaterhouse- 
Coopers, Ernst & Young LLP, 
Deloitte & Touche LLP, 
KPMG aia and in- 
surance giant AIG Interna- 
tional Inc. 

The RPI was originally be- 
ing developed to provide a 
risk measurement model for 
use within the insurance and 
accounting industries. But the 
goal now is for the index to 
provide the basis for a much 
more broadly applicable sys- 
tem for measuring and rating 
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avoid them. PAGE 39 


aS 


organizational risk prepared- 
according to 
close to the GSC. 

The GSC has been in active 


ness, a source 


discussions with several in- 
dustry groups, including The 
Open Group standards body, 
for several months in a bid to 
gain endorsements and wider 
support for the effort to build 
the framework. 

A GSC spokesman declined 
to comment on the current 
status of that effort. But the 
source close to the body con- 


Risk Index, page 51 


Risk Preparedness Index 


In the aftermath of the March 
ll terrorist attacks that killed 
201 train passengers in Madrid, 
some U.S. lawmakers and IT 
professionals are raising ques- 
tions about the lack of securi- 
ty systems in place 
throughout the U.S. 
commuter rail system, 
particularly the federal- 
ly subsidized Amtrak 
network. 

In a letter sent to 
Secretary of Homeland Secu- 
rity Tom Ridge on March 12, 
Sen. Olympia J. Snowe (R- 
Maine) and Rep. Mike Castle 
(R-Del.) demanded an expla 
nation for the imbalance be- 
tween the billions of dollars in 
Department of Homeland Se- 


irra 


air and sea ports and the mea- 
ger $115 million made available 
to protect railroads. 

“We have continued to 
shortchange security for our 
nation’s rail system,” Snowe 
and Castle wrote in 
their letter. “More 
must be done to intro- 
duce improved securi- 
ty procedures and 
technologies to our 
rail system so we can 
be better p 


A DHS spokesman ¢ 


rotected.” 

aid rail 
system security is primarily 
the responsibility of Amtrak 
and state and local authorities. 
The spokesman also acknowl- 
edged that Amtrak passengers 
Amtrak, page 51 


Users Lobby for MPE Support 


Prod HP to release its 
3000 OS source code 


BY PATRICK THIBODEAU 
Users of Hewlett-Packard 


| Co.'s doomed e3000 system 


| are pushing the company to 


= WHAT: A standard framework for 
quantitatively measuring and rating a 
Core) tiT es aN SRN 18 oat SMO Ces Oe Cer8 de 
Lh js tli del e)e-leerroN cA elie 
Res mY mum eLv sca ual eR met g 
Flom Uae m uses Wee a cs) Ren 
Tele mmol el A UCMe aoe) Te mF 


ih a Cue cleR enemies 
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= WHEN: To be released sometime 
SRT ag 


act quickly to release its pro- 
prietary operating system 
source code to keep it from 
being frozen in time once the 


| company cuts support at the 
| end of 2006. 


Users and independent 


| e3000 consultants are asking 


HP to agree to a plan to li- 
cense the MPE operating sys- 


| tem source code this year to a 


third party such as OpenMPE 
Inc., a user advocacy group in 
Hagerstown, Md. 

“There is clearly a business 
case for continuing MPE’s life 
beyond 2006,” said Donna 
Garverick, who administers 
e3000 systems at Longs Drug 
Stores Corp., a 470-store chain 
based in Walnut Creek, Calif., 
and who is involved with 
OpenMPE. “You are going to 
have customers, some of no- 
table size, who will still be 
running MPE, and having an 
organization to support MPE 
is important.” 

Even though the deadline to 

HP e3000, page 16 
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Make a name for yourself 
with Windows Server System. 





Gateway knows that 

IT and financial services 
want the same thing. 

A solid investment. 


“We need equipment that works and a company that’s 
going to be around for technical support. There are two 
ons we use Gateway® servers: cost and reliability. 

teway servers are efficient.” 


Bruce Hagood, IT Director 
Money Concepts International 


the online securities market, fortunes can be won and lost in seconds. 


© So when Money Concepts required a cost-effective, secure server network 
solution to meet the growing needs of their 650 financial planning centers, 
they invested in Gateway. 


We provided highly reliable server technology with the reliability, advanced 
features, built-in redundancies, and high-speed performance necessary to 
meet strict SEC requirements. And with a dedicated systems consultant 
account manager advising from planning through implementation, this was 
one investment that proved to be no risk and all reward for Money 
Concepts International. 

To learn more about Gateway’s complete IT solutions including 
servers, storage, and networking, call us today. Ask about saving 
$1,000 on our 840-2TB SATA RAID Enclosure when purchased 
with a rackmount server before April 30, 2004.' 


We’re listening. 


Gateway® 995 Rack Server Award-Winning Customer Support? 
Prices Starting at $5,499 


4U Quad Processor, Enterprise Class 


Gateway® 840-2TB SATA 
RAID Enclosure 
Prices Starting at $5,949 


2U High-Capacity Storage Solution 


Gateway provides: 
* 24/7 phone support 


* Quad Intel® Xeon™ Processor * On-site support, next business day and within 4 hours 


MP Capable 
« Up to 24GB PC2100 ECC DDR SDRAM 
* Up to Five U320 SCSI Hot-Swap 
Hard Drives 
* Multipath Booting, Memory Scrubbing, 
Light Guiding Diagnostics 


* Comprehensive 2TB Solution 
Scales to 3TB 


* Hot-Swap SATA Hard Drives with 
Embedded RAID 


* 3-Year Limited Warranty4 


ee Ph 


or the next day—nationwide* 
* On-site support within 2 hours—in 68 major metro areas‘ 


Gateway. 


Professional 








PeopleSoft announces an 
upgrade of its World green- 
screen applications. 


EDS sells off its product life- 
cycle management unit. 


Microsoft users make a 
short-term demand: better 
patch management. 


Longhorn will arrive no earli- 
er than 2006, a Microsoft ex- 
ecutive says. 


Computerworld’s Maryfran 
Johnson wins a national award 
for editorial integrity. 


Novell’s embrace of Linux 
revitalizes the company in the 
eyes of some users. 


TOEs, or TCP/IP offload en- 
gines, start to make inroads 
into iSCSI-based SANs. 


The SEC seeks feedback on 
possible new rules to auto- 
mate stock-trade processing. 


Cisco bulks up its Catalyst 
switch line, including support 
for 10 Gigabit Ethernet. 


CRM users tout the benefits 
of the technology — if it’s 
used in the right way. 


The lack of alignment be- 
tween IT and business units is 
a two-way street, according to 
a survey of tech execs. 


IT professionals need a mix 
of industry-specific skills 
and a multidisciplinary back- 
ground to keep their jobs as 
more work is moved offshore. 


Blueprint for Code Automation 


In this week’s Technology section: Some companies are 
adopting the Model Driven Architecture approach to build- 
ing applications to achieve benefits such as automatic 
code generation, reductions in development time and 
costs, and improvements in code quality. Page 25 


TECHNOLOGY 


30 Emerging Technologies: 
SANs Come Up to Speed. 
Two new high-speed Fibre 
Channel standards could 
provide a migration path as 
SANs ascend to 10Gbit/sec. 
speeds. 


32 Q&A: Innovation for Hire. 
Sarnoff Corp. CEO Satyam 
Cherukuri discusses his 
company’s innovation meth- 
odology and why it has 
little to do with “hot” tech- 
nologies. 


34 Future Watch: Chameleon 
Computing. Reconfigurable 
computing architectures in- 
volve processor hardware 
that automatically adapts to 
changing application needs. 


36 Security Manager’s Journal: 
Security Tools Search Falls 
Short. Identity management 
and encryption tools demon- 
strated at a security trade 
show fail to impress Mathias 
Thurman. 


MANAGEMENT 





39 Outsourcing Gotchas. Savvy 
lawyers have identified 12 of 
the biggest traps in outsourc- 
ing contracts — from having 
a fuzzy scope to lacking an 
exit strategy — and how to 
avoid them. 


44 Career Watch. Vince Campi- 
telli describes the work of IT 
auditors at Wachovia Corp. 
and offers career advice for IT 
professionals considering a 
move into IT auditing. 


OPINIONS 


8 On the Mark: Mark Hall re 
veals why Web server load- 
balancing products are on 
the outs. 


22 Maryfran Johnson warns IT 
managers that they may have 
to fork over a lot of money to 
make privacy advocates happy. 


22 Pimm Fox has an answer for 
companies that wonder how 
to go about managing their 
expanding and diversifying 
storage infrastructures. 


23 Thornton A. May discusses 
three techniques for planning 
for the future that are inex- 
pensive to deploy. 


38 Tommy Peterson laments that 


as technology has lost some of 


its cachet over the past few 
years, IT departments’ status 
has declined. 


45 Norbert J. Kubilus backs leas- 
ing: You get predictable pay- 
ments and asset management, 
and the leasing company as- 
sumes the risks of managing 
IT obsolescence and disposal. 


52 Frankly Speaking: Frank 
Hayes says getting your de- 
partment educated and ready 
for RFID can now be done on 
the cheap. 
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Play War! 


in the Management section: War games 

can make strategic planning come to life and 
help companies simulate business moves such 
as making strategic IT investments — as well 
as competitors’ countermoves. Page 42 
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Foiling a Hacker’s Delight 


MOBILE/WiRELESS: How to implement an in- 
depth defense to protect the corporate net- 
work against threats associated with remote 
and mobile workers. @ QuickLink 45354 


Cache or Carry? 


STORAGE: Companies that need to consoli- 
date their data over WANs can choose be- 
tween file-caching technologies and WAN 
optimization, writes Val Golan of Golan Con- 


sulting. @ QuickLink 45361 


Avoid the Career Doom Loop 


CAREERS: If you don’t constantly demon- 
strate your value to your company, people 
will forget what you’re doing and why you’re 
there. To avoid the doom loop at work, take 
personal responsibility to ensure that you’re 
always adding value. @ QuickLink 45178 


‘Trusted’ Digital Insider Theft 


SECURITY: When credit card numbers, cus- 
tomer records or source code are lifted from 
your company in broad daylight, that’s extru- 
sion. IT veteran Danny Lieberman suggests 
where to look for potential sources of extru- 
sion at your company. @ QuickLink 45044 


Web-based Mail and Security 


SECURITY: Many companies are skittish 
about Web mail because of security con- 
cerns. Consultant Keith Pasley takes a look at 
options for deploying secure Web mail at 
your company. @ QuickLink 45181 


3 ONLINE 
What's a QuickLink? DEPARTMENTS 
Breaking News 

@ QuickLink a510 


Pointing to related content on 

our Web site. Also, at the end of 
each story, a QuickLink to that 

story online facilitates sharing it 
with colleagues. Just enter any 
of those codes into the Quick- 

Link box, which is at the top of 

every page on our site. 


Newsletter 
Subscriptions 
@ QuickLink 21430 


Knowledge Centers 

© QuickLink a2570 
The Online Store 

@ QuickLink 22420 
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Microsoft, European 
Officials End Talks 


Antitrust settlement talks be- 
tween Microsoft Corp. and the 
European Commission broke 
down last Thursday, and Euro- 
pean competition officials this 
week plan to ask the commission 
to rule that Microsoft has abused 
its desktop operating system mo- 
nopoly. The regulators will also 
propose a series of restrictions on 
Microsoft's future business con- 
duct. The software vendor said it 
will appeal the expected decision. 


2 ns NE Hh R atmaan 


3Com Reports Loss 


3Com Corp. in Santa Clara, Calif., 
reported that it remained in the 
red during its third quarter and 
that revenue fell 21% year over 
year. The company said it expects 
fourth-quarter revenue to be simi- 
lar to the total from the third 
quarter, which ended Feb. 27. 
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SEC Fines Lucent 


Lucent Technologies Inc. said it 
will pay a $25 million fine to the 
U.S. Securities and Exchange 
Commission as part of a deal 
signed early last year to settle an 
accounting investigation. Lucent 
initially wasn’t fined, but the com- 
pany said the SEC’s staff has de- 
cided that it should be penalized 
for a lack of cooperation during 
the investigation. Murray Hill, 
N.J.-based Lucent added that it 
doesn’t plan to contest the fine. 


Short Takes 


Dallas-based i2 
INC. said it plans to lay off an un- 
determined number of workers as 
part of a restructuring aimed at 
reducing operating expenses by 
about 10%. . . . IBM said it was 
tapped by the U.S. DEPARTMENT 
OF DEFENSE to help develop poli- 
cies for the use of RFID devices 
by military suppliers. 
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| PeopleSoft Updates World 


Green-Screen Applications 


Adds Web interface to J.D. Edwards line 





BY MARC L. SONGINI 
N A MOVE AIMED at keep- 
ing a large part of its ex- 
panded installed base 
happy, Peo- 

pleSoft Inc. is 
| rolling out a re- 
fresh of the World 
green-screen appli- 
cations that the 
software vendor 
inherited when it bought J.D. 

| Edwards & Co. last summer. 

PeopleSoft last week an- 

| nounced a Web-based user in- 
terface and various other new 
features for the World line, 
which is still used by nearly 
half of J.D. Edwards’ 6,700 cus- 
tomers. The upgrade follows 
the launch last fall of a pro- 
World lobbying campaign by a 
group of users who said they 
didn’t want the software to be 
treated as a cash cow while 
PeopleSoft tried to migrate 
them to its other applications 
[QuickLink 42316]. 


Visit our 


| Positive Response 


“We're pleased PeopleSoft has 
brought some new vigor into 
the World line,” said James 
Berlekamp, applications man- 


| line. It will be available at the 
| end of this month. PeopleSoft 


is also adding about 250 other 


enhancements, mostly focused 


Knowledge Center 


@ QuickLink k2000 
www.computerworld.com 


on ease of use and 
regulatory compli- 
ance. For example, 
tighter integration 
will let users feed 
sales order infor- 
mation directly 
into World’s manufacturing 


i iacatliaass 


ALL ABOUT APPS 


and distribution management 


| he said. “We’ve been able to, as 


| global systems integrators and 
| service providers, a UGS 


| wake of its sale by parent Elec- | 
| UGS the “ability to act more 


ager at tableware maker Libbey 


Inc. in Toledo, Ohio. Libbey 
runs a suite of World software, 
including the human resources 
and payroll modules. Berle- 
kamp noted that J.D. Edwards 
had allowed the World line to 
wane, forcing Libbey to write 
some of its own bug fixes and 
functionality enhancements. 
The Web-based user in ter- 

face could help the company 
cut down on software admin- 
istration costs, he said, add- 
ing that he hopes PeopleSoft 
will consider additional im- 
provements to make World’s 
warehouse and inventory 
management software run 
more efficiently. 

| The new user interface was 

| the most requested feature, 

| said Dave Siebert, general 

| manager of the World product 


| tomers of UGS’s product life- 
| cycle management software, 
| the executive added. 


| the sale of its UGS PLM sub- 
| sidiary to three private equity 
| firms in a transaction valued at 


Silver Lake Partners LLC in 


| burg Pincus LLC in New York 
| will each hold an equal invest- 
| ment in UGS. 


| will allow UGS PLM to attract 
| more services partners that 
| might otherwise have stayed 


| executive vice president of 
| business strategy at UGS. 


software, Siebert said. 
“This is a boost [for World],” 


part of PeopleSoft, get more re- | 
sources and been able to add 
more people to development.” 


EDS Product Life-Cycle 


“Any movement in this 


| space is appreciated,” said 

| Gary Riley, a systems analyst 

| at Matanuska Telephone Asso- 
| ciation Inc. in Palmer, Alaska, 


and a member of the Quest 


| user group for J.D. Edwards 


customers. Riley said he’s in- 
terested in the Web user inter- 


between the distribution and 


| sales order applications. 


World runs only on IBM’s 


| iSeries servers (formerly the 


AS/400 line), while the newer, 


| midmarket-oriented Enter- 
| priseOne software that People- 
| Soft got from J.D. Edwards sup- 


ports multiple hardware plat- 


| forms. PeopleSoft also an- 


nounced an upgraded version 


Management Unit Sold 


| BY JAIKUMAR VIJAYAN 
| Users of UGS PLM Solutions 


software can expect to see the 
company partner with more 


official said last week in the 
tronic Data Systems Corp. 


The sale is also unlikely to 
cause any disruptions for cus- 


EDS last week announced 


$2.05 billion. Under the deal, 
Bain Capital LLC in Boston, 


Menlo Park, Calif., and War- 


Being cut loose from EDS 


away, said Robert M. Nierman, 





“Being part of EDS made it 


| difficult for us to entertain se- 
| rious discussion about global 
| partnerships,” he said. “This 

| opens the door for stronger 

| partnerships, though EDS will 


remain a key partner for us.” 
Being independent will give 


| like a software company” in- 
| stead of the more services-led 
| business it had become as an 


EDS subsidiary, said Ed Miller, 
an analyst at CIMdata Inc. in 


| Ann Arbor, Mich. 


“In the near term, they need 
to reinforce to their customers 


| that their direction is consis- 


PLM Portfolio 


= Teamcenter: Core PLM suite 


@ Unigraphics NX; 3-D prod 
uct engineering software 

Pe batt mm le fel (crt) 
CAD/CAM/CAE product 


earns mmrcoee talon 
information management 





| NEW FEATURES 


EnterpriseOne 8.10 


= Areal estate management ap- 
plication that streamlines the 
tracking of leases, budgets and 
other property-related data 


w A financial management tool 
for creating multiyear forecasts 
to help reduce business risks 


= Asset life-cycle management 
software to automate the 
process of ensuring that 
equipment is used efficiently 


| of the EnterpriseOne applica- 
| face and the tighter integration | 


tions last week (see box). 
John Matelski, deputy CIO 
for the city of Orlando, isn’t a 


| World user. But after conduct- 
ing an informal survey of 10 

| World customers, Matelski, 

| who is a member of Quest’s 

| board, said “the overriding 

| sentiment ... seems to be that 


they’re pleased that long- 
awaited progress is finally 


being made.” @ 45589 


| tent with what they have been 
| saying” prior to the sale, 
Miller said. The UGS busi- 


ness, with nearly $900 million 
in revenue, was a profitable 
one for EDS. But it will need 


| to work on raising its market 
| visibility after having a rela- 


tively low profile as an EDS 
unit, Miller added. 

“Everyone we have talked to 
from the EDS side has assured 


| us that this is going to be com- 
| pletely transparent,” said John 
| Loo, senior manager of techni- 
| cal computing at a California- 


based sporting goods compa- 
ny that is a longtime user of 


| UGS PLM products. Loo re- 
| quested that his company not 


be named. 

EDS’s sale of its UGS PLM 
subsidiary comes at a time 
when the PLM industry looks 
poised to grow, said Andrew 
Balson, managing director at 
Bain Capital. After years of 
slow growth, the market for 
product life-cycle manage- 
ment software has reached an 
“inflection point,” Balson said. 

“We think the technology 
today is mature enough and 
the customers are mature 
enough that we are going to 
see very significant growth,” 


he said. @ 45592 
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Users Want Microsoft to Feel 
Patch Management Urgency 


New Windows 
Update Services 
gets eager looks 


BY CAROL SLIWA 
LAS VEGAS 


Users of Microsoft Corp.’s 


management products showed | 


keener interest in short-term 
deliverables than in the long- 
term strategic initiatives that 


the company outlined here last | 


week at its annual manage- 
ment conference. 

They packed sessions on 
Systems Management Server 
(SMS) 2003 and the newly re- 
named Windows Update Ser- 
vices, formerly called Soft- 
ware Update Services (SUS). 

Although the acronym for 
the new edition — WUS — 
drew chuckles, attendees ex- 
pressed serious interest in the 
free service that can help 


them patch not only Windows | 


but also Office 2003 and XP, 
SQL Server and Exchange 
Server. The ability to update 
other Microsoft products will 
be added later this year, said 
Steve Anderson, a director of 


Windows server marketing. 

In contrast to SUS, the new 
version will also let users 
target individual computers or 
groups of computers, get basic 
reports about which comput- 
ers have been patched, and 
download only patch bits that 
represent changes to the sys- 
tem, Anderson added. 

However, the delayed avail- 
ability of WUS was a letdown 
for some attendees. CEO Steve 
Ballmer pledged last October 
that the patch management 
services would be available in 
the first half of this year, but 
Microsoft officials last week 
said they won't be ready until 
the second half. A limited beta 
was released last week to about 
200 customers, according toa | 
Microsoft spokeswoman. 

“T was a little disappointed,” 
said Scott Sikes, manager of 
open systems operations at 
Compass Bank in Birmingham, | 
Ala. “We wanted to look at it 
because we're also looking at 
several third-party products. 
Patch management is a pretty 
big issue, especially in the fi- 
nancial realm.” 


Muglia: No Longhorn Before 2006 


LAS VEGAS 


Microsoft executives have been 
fuzzy on the expected ship date for 
the next major version of Windows, 
and they have raised the possibility 
of newly packaged editions 
of the current client and 
server versions. 

Bob Muglia, senior vice 
president of Microsoft's Win- 
dows Server division, last 
week discussed the compa- 
ny's options for Windows 
and its upcoming manage- 
ment offerings. 


Is there going to be a Release 2 
of Windows Server 20037 
There’s a set of innovations that 
have been under development. We 
want to get those into customers’ 


hands. Exactly the vehicle we're go- 
ing to do that, we're still working on 
the specifics. 


When is the next major Win- 
dows release, code- 
named Longhorn, com- 
ing? 2006 is the earliest 
time frame we're looking at. 


Is it likely that the client 

and server will ship at 

different times? They 

will almost always ship at dif- 

ferent times in the future. 

Clients need slightly less 
bake time than servers do. 


ls 2006 applicable to the Long- 
horn client and server? | can’t 
speak as much for the client pieces. 


Two products that are on 
track to ship in the second 
half of this year as originally 
planned are Microsoft Opera- 
tions Manager (MOM) 2005 
and System Center 2005. The 
products were tagged 2005 be- 
cause Microsoft plans to adopt 
a new naming convention, la- 
beling offerings due in the sec- 
ond half with the subsequent 


| year’s date, according to Bob 


Muglia, senior vice president 
of the Windows Server division. | 


Weighing the Need 


System Center 2005 is an inte- 


| grated management suite that 
| includes SMS, MOM and a 
new common reporting sys- 


tem. Microsoft last week also 
unveiled new details about the 


| second version of System Cen- 
| . . . 

ter, including a wizards-based 
| capacity-planning tool code- 


named Indy. 
Although several users at 
companies that already oper- 


| ate both SMS and MOM said 
| they’re intrigued by the new 
| capabilities 
companies said they don’t think | 
| they will have reason to seek 


some from larger 


Some analysts talk about Long- 
horn server arriving in 2007. 

Is that likely? It's too early to say 
for sure. 


Is it possible that Longhorn fea- 
tures will turn up in Release 2 
of Windows Server 2003? There 
are three major pillars for Longhorn. 
One is the new user interface pieces 
in the Avaion Ul, the graphical Ul. 
Another is WinFS [storage]. And the 
third is the Web services infrastruc- 
ture in Indigo. . . . At this point, it 
doesn't look like any of those things 
could possibly ship any earlier. 


Windows Update Services was 
due in the first half of this year. 
Now it’s expected in the second 
half. What happened? We start- 
ed looking at the features that our 
customers needed to get these 
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Microsoft Management Update 


WINDOWS UPDATE SERVICES: The renamed new edition of Software 
Update Services, for patch and software update management; the beta was 
released last week. It can now be used for SQL Server, Exchange Server, 
Office 2003 and Office XP, in addition to Windows. 


SYSTEM CENTER 2005: A private beta was released last week; the inte- 
grated management suite will include Systems Management Server 2002, 
MOM 2005 and a new common reporting engine. 


SYSTEM DEFINITION MODEL (SDM): The first design preview of the XML- 
based application manifest was unveiled to 150 partners and large customers 
for feedback; SDM is core piece of Microsoft's Dynamic Systems Initiative. 


MICROSOFT OPERATIONS MANAGER (MOM) 2005: Formerly known as 
MOM 2004; a beta was released last week. New features include wizard- 

based installation, a task-based user interface and visual of display of servers 
and applications. A beta of the lower-cost MOM 2005 Express was also released. 


MOM MANAGEMENT PACKS: Tliey were released from Siebel Systems, 
Veritas and Hitachi, in addition to Microsoft connectors for IBM Tivoli and 


HP OpenView. 


SYSTEMS MANAGEMENT SERVER 2003 FEATURE PACKS: Beta ver- 
sions were released last week of packs for managing devices running Win 
dows CE, Windows Mobile-based Pocket PC and Smartphone software. 


out the new, integrated product. 
“Unless we undergo some 
sort of change in products, I 
don’t see it coming into our or- 
ganization,” said Clark Ardern, 
a technical director at CNA In- 
surance in Chicago. He noted 


| that CNA uses operations man- 
| agement products from NetIQ 


Corp. and Hewlett-Packard Co. 
rather than MOM. 

The long-term vision for 
System Center is far more am- 
bitious than the initial version 


patches rolled out effectively, and 
frankly, we've added functionality 
to Windows Update Services over 
the last six months. For example, 
we added the ability to install patch- 
es at the time a user shuts down 
asystem. 


Last year, Microsoft officials 
said Version 2 of System Cen- 
ter would be ready in 2005. Is 
that stiil the case? We'll be in 
beta for sure in 2005. 


Is it likely to be ready in 2006 
then? | think itis likely 2006. 
- Carol Sliwa 


MORE ONLINE 


Head to our Web site for the full 
Muglia interview: 
QuickLink 45522 
www.computerworld.com 
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due out this year. Version 2 
will support the XML-based 
System Definition Model 
(SDM), which is intended to 
help developers, operations 
managers and users better 
communicate about application 
resources and requirements. 

A design preview of SDM, 
which is a core piece of Mi- 
crosoft’s Dynamic Systems 
Initiative (DSD, was unveiled 
earlier this month to a select 
group of partners and large 
customers. SDM is expected 
to be released in the first half 
of next year along with Visual 
Studio 2005, and it will later 
be supported in the second 
version of System Center, 
which is due no sooner than 
2006, according to Muglia. 

But the full DSI vision isn’t 
expected to be realized for 
several years, and some users 
said that even though aspects 
of it look interesting, it’s too 
far off for them to give it seri- 
ous attention. 

Rick Derks, director of infor- 
mation services at Farm Credit 
Services of Missouri in Jeffer- 
son City, said DSI represents “a 
whole different way of doing 
things,” not just a new software 
and hardware infrastructure. 
He said it will require organi- 
zational change and the educa- 
tion of developers, managers 
and users about the tools sup- 


porting SDM. @ 45593 
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Visual Studio .NET 2003 can cut 
development time by two-thirds, 
giving you more time to think. 


Got a big idea? Visual Studio® .NET 2003 
delivers higher productivity, helping 
you turn that big idea into reality faster 
than you ever thought possible. Want 
proof? Visual Studio .NET enabled 
Xerox Global Services to bring the 
v2.0 release of its CentreWare Web 
software to market in one-third the 
time compared to their previous 
development platform. To find out how 
Visual Studio .NET 2003 can help you 


quickly turn your big ideas into reality, 


visit msdn.microsoft.com/visual/think 


Microsoft* ~ 


Visual Studio 
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Sun Execs Detail 
Software Plans 


Sun Microsystems Inc. plans to 
ship a version of its Java Enter- 
prise System software for Red 
Hat Linux within 60 days and add 
Windows and HP-UX releases by 
year’s end. Executives said Sun 
will also detail a road map for 
identity management tools in the 
next 60 days. [For more details, 
go online: QuickLink 45507]. 


BR EF SE EE 


Nortel Places CFO, 


Controller on Leave 


Nortel Networks Ltd. said it has 
put its chief financial officer and 
controller on paid leaves of ab- 
sence while an audit committee 
reviews the company’s financial 
results for last year. The leaves 
of absence were initiated one 
week after Nortel disclosed that 
it likely will have to revise the 
2003 results. 


Veritas to Restate 


Veritas Software Corp. said it will 
restate its financial results for 
2001 and 2002 after an internal 
investigation showed shortcom- 
ings in its accounting practices 
for those years. Veritas will also 
revise its results for last year. 


Computerworld ’s Ma 


MARK HALI 


® ON 
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Server Lond Balancers 
Obsolete in 


. less than two years. That’s the prediction of Craig Stouffer, marketing 
vice president at Redline Networks Inc., who claims that multifunc- 
tion appliances are clearing out the clutter of “Web tier front-end sys- 


tems.” 
on March 31 of the Redline E|X Version 
3.3 all but puts the nail in the coffin of sin- 
gle-minded load balancers for large-scale 
Web operations. Not unlike the folks at 
Santa Clara, Calif.-based NetScaler Inc. 
mentioned here last week [QuickLink 
45413], Redline is packing SSL accelera- 
tion, HTTP security, authentication and 
authorization features into its box along 
with caching, connection management 
and server load balancing. The new re- 
lease also adds self-healing mesh technology 
to a rack of up to 64 of these appliances 


Stouffer says that his Campbell, Calif.-based company’s release 


looking for details on all manner of tech 
gear. It maintains catalog data from 10,000 
high-tech firms in its database, which 
you can search for free. On Thursday, the 
company will add The Engineering Web 
to its information motherlode. It indexes 
100,000 technology Web sites containing 
20 million pages of mind-numbing data that 
you can’t live without. CEO Jeff Killeen 
says that technologists get frustrated by 
searching online with general-purpose 
search engines. “When you do a search 
on gyros, you don’t want to see informa- 





so no site visitor ever 
loses his place online, 
even in the midst of en- 
tering data on a page. If 
a Redline box crashes in 
the middle of a transac- 
tion, another slips in to 
complete the deal. The 
3.3 upgrade is free to ex- 
isting users. ® While on 
the subject of free, book- 
mark www.globalspec. 
com, a great technology 
information site. Run by 
GlobalSpec Inc. in Troy, 
NY., 
the engineering-oriented 


the site caters to 


If your Citrix MetaFrame or Or- 
acle Forms applications are 
running roughly, consider 
SilkPerformer 6.5. The nonin- 
TSR CDCR CH RUUILE-U Ce} 
those environments to its capa- 
bilities when the upgrade ships 
RLS Ci eeilt CBSE TES 
Inc. in Lexington, Mass. Not 

COR tn lar Cs CH ig 
performance but also you'll 
have real-time app monitoring. 
AU CeCe le UR 


ryfran Johnson 


Recognized for Editorial Courage 


BY DON TENNANT 
Computerworld editor in chiet 
Maryfran Johnson last week 
was honored with a nationz 
business journalism award it 
recognition of her steadfast 
adherence to the 
ing readers first and maintain 
ing independent. honest, anc 
ethical journalism.” 

The Timothy White Awarc 
Johnson i 


“goal of plac 


was presented t¢ 
an American Business Medi: 
luncheon here. Johnson wa: 


the first recipient of the pre: 


tigious award, which madc its 
debut at the 50th Annual Neal 
Awards ceremony held to rec- 
ognize excellence in business 
journalism 

The 
the longtime editor of Bill- 
board magazine who was 


award was named for 


considered the conscience of 
that publication and who suc- 
cumbed to a heart attack in 
It was presented to 
Johnson by White's widow, Ju 
dith Garlan White. 

The 


demonstrations of Johnson’s 


june 2002 


award cited several 


courage and integrity, includ- 
ing a June 2001 editorial on 


Oracle Corp.’s decision to can- 
cel a large amount of advertis- 


ing after Computerworld pub- 
lished a series of articles on 
Oracle's unpopular pricing 
policies | QuickLink 21296]. 
Also cited was an October 
2003 editorial titled “Ethics 
and Influence.” In it Johnson, 


prompted by a Computerworld 


story on ethical questions 
raised by Microsoft Corp.'s 


sponsorship of a Forrester Re- 


search Inc. report, drew atten 


tion on sandwich shops,” 
he quips. (Of course, that 
would depend on how 
hungry you are.) Unlike 
Google and other search 
companies that take 
money from vendors 

to place their informa- 
tion at the top of search 
results, GlobalSpec 

lists its discoveries in 
alphabetical order. “We 
couldn't think of a fairer 
way,” Killeen says. Fair 
enough. = Need anew 


hobby? How about spam re- | 


venge? That’s one of the 


side benefits behind the release of the an- 
tispam tool Spamfire 1.5 for the client, 
with a server version due by summer and 
a hosted Spamfire option ready next 
month. Michael Herrick, CEO of Matter- 
form Media Inc. in Espanola, N.M., said 
Spamfire can send an untraceable re- 
sponse to spammers, pestering them with 
a nonsense message every 10 seconds. 
The software also includes the spam crime 


| reporter feature that manages your end- 
| less unsubscribe clicks and tracks down 


spammers that have illegally ignored 
your request. As Herrick puts it, “The 


| CAN-SPAM Act actually legitimizes spam,” 
| but you can at least use the one tough 


provision of the legislation, the legal mus- 
cle now behind unsubscribe compliance, 


| and get more than simple revenge. You 
might get some lawsuit money as well. 


Once hackers steal passwords they can get 


| to sensitive data on your systems from 
| any PC in the world. For now. Later this 


year expect to see PC suppliers that use 


| core system technology from Phoenix 
| Technologies Ltd. in Milpitas, Calif., pre- 


load their computers with Trust Connec- 


| tor, which encrypts a unique and chang- 


ing key into the system’s read-only mem- 
ory. Servers can request the key from the 
PC or laptop to ensure that not only is the 
password acceptable, but the machine is, 
too. ® Ektron Inc. in Amherst, N.H., is 
well under way turning its content man- 
agement software into a top-to-bottom 
.Net application. The CMS400.Net prod- 
uct will be ready by June, says CEO Bill 
Rogers. He says going all .Net makes the ap- 


plication more secure since you can define 


the rights of all .Net code. COM objects, 
on the other hand, can run amok on a 
server if accessed by hackers or malcon- 


tents. @ 45582 


tion to the role played by the 
media itself and its “spotty 
record in asking enough of the 
right questions about the pedi- 


| gree of the research we report 
| on” [QuickLink 42153]. 


“Upholding the editorial 
integrity of the work Comput- 
erworld does is already a privi- 
lege for me, as is 
leading the outstand- 
ing group of journal- 
ists we have here,” 
Johnson said. “This 
award is a great hon- 
or for us all, but it’s 
also a wonderful re- 
minder of how im- 
portant it is to keep 
our readers fore- 
most in everything 
we do.” 


CW'S MARYFRAN 
Asm RU 
BT 
Eee 


“This is testimony to our 
editorial mission to be the 
voice of IT management,” said 
Bob Carrigan, CEO of Com- 
puterworld Inc. “We want to 


| be the most trusted source for 
| IT management, and it’s grati- 
| fying that such a prestigious 


organization feels that our edi- 
torial leader stands 
above all others in 
terms of trust and in- 
tegrity in journalism.” 
Also at the Neal 
Awards ceremony, 
Computerworld was 
honored as a finalist 
in the category “Best 
single issue of a 
newspaper/news 
tabloid” for its July 7, 
2003, issue. @ 45605 
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Start expanding securely with Intrusion Prevention Solutions from McAfee Security. 


business from the: desktop, to the network, to. the server—the mission-critical heart of your | 


technologies and you can start preventing. known.and unknown threats rather than merely detecting them. Which means you’can think a 
little les§ about security, ahd more about securing new markets. Start today at start.mcafeesecurity.com 
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inux Push Breathes New Life 
Into Novell for Some IT Execs 


Users give NetWare 


another chance; 


product integration moves on tap 


BY MATT HAMBLEN 
TENDEES AT Novell 

Inc.’s BrainShare 

conference this week 

will hear more prod- 
uct announcements related to 
the company’s Linux strategy, 
but the bigger news may be the 
smiling faces of Novell officials 
and many users. 

The reason: After suffering 
through a protracted period of 
decline, Novell and its flagship 
NetWare technology have ac- 
quired new life following the 
company’s purchases of Linux 
software vendors Ximian Inc. 
and SUSE Linux AG, several 
users and analysts said. 

In fact, some users who pre- 
viously had bad impressions 
of Novell are now buying its 
products because of its Linux- 
oriented strategy, said James 
Taylor, a consultant at The 
East Cobb Group Inc. in Mari- 
etta, Ga. For example, Taylor 
said, a medical device maker 
that he wouldn’t name is in- 
stalling six NetWare-based 
servers for file and print func- 
tions, plus six Linux servers 
that are running NetWare ser- 
vices under the open-source 
operating system. 

Boscov’s Department Store 
LLC in Reading, Pa., gave up 
on NetWare several years ago, 
said Joe Poole, manager of 
technical support at the 40- 
store retail chain. But he and 
other IT managers at Boscov’s 
met with a Novell salesman 
last week to discuss, among 
other things, the possible use 
of Linux on its 1,200 desktops. 

“We did write Novell off 
with NetWare,” Poole said, 
noting that Boscov’s primarily 
migrated to Windows-based 
servers. “But I’m more excited 
about SUSE than ever before 
because of Novell’s purchase 
of them.” He added, though, 
that SUSE users may have to 


pay higher prices to Novell. 


A spokesman for Novell 
wouldn't disclose details 
about product announcements 
due to be made at BrainShare, 
which is being held in Salt 
Lake City. But he said Novell 
plans to highlight “synergies 
between the products of com- 
panies” it has acquired. 

Taylor said he expects Nov- 
ell to announce that it has inte- 
grated its ZENworks manage- 
ment software with Ximian’s 
Red Carpet Enterprise tools to 
offer improved management of 
Linux PCs, a pairing that sev- 
eral users are also anticipating. 

Earl Perkins, an analyst at 


Meta Group Inc., said users 
should also expect products 
that bring together pieces of 
the technology Novell has ac- 
quired with its security, identi- 
ty management and Web appli- 


cation development software. 


More centrally, however, 


| Novell’s Linux drive has refo- 
| cused the company and revi- 


talized its core NetWare ser- 
vices as a companion to SUSE 
Linux, Perkins said. “This 
gives promise to anybody who 
wants to listen that there is an 
operating system on par with 
Microsoft for Linux,” he 


| added. “I see a lot of spring in 


the step at Novell.” 

Still, some users will have 
pointed questions for Novell 
executives at BrainShare. For 


example, George Raetzke, a 
| senior systems programmer at 
| Northern Illinois University 
(NIU) in DeKalb, said he 
| wants to know “exactly what 
| are the pluses and minuses of 


running different NetWare ser- | 


vices on the NetWare or the 
| Linux kernel. Of course, that’s 
| politically a hard thing for 
| them to answer.” 

Raetzke wants to be able to 
justify moving NIU’s NetWare 
services to Linux but can’t if 

| “we have to spend hundreds 

| of man-hours to get something 
that provides only a 3% im- 

| provement in performance.” 

Buying SUSE “was definite- 
ly a good direction” for Novell 
to take, said Brad Staupp, a se- 
nior support analyst at John- 


Users Look to Cut Storage CPU 
Utilization With Network Cards 


TOEs installed to 
reduce TCP/IP 
processing loads 


BY LUCAS MEARIAN 
Network interface cards that 
can open up more bandwidth 
for transporting data between 
storage devices and applica- 
tion servers are making in- 
roads with corporate users, as 
prices fall and the Internet 
SCSI protocol catches on. 
Users and analysts said 
prices for the TCP/IP offload 
engines, or TOEs, have fallen 
below $500 in some cases, 
down from about $1,000 when 
they emerged two years ago. 
Some IT managers said 
they’re waiting for broader 
adoption of the iSCSI data 
transport protocol before in- 
stalling TOEs on high-end 
servers. But using the cards on 
smaller systems makes sense 
at current prices, they added. 
Mike MacNeill, director of 
technical operations at Cross 


Country Healthcare Inc. in 


| Boca Raton, Fla., said he’s us- 
| ing six iSCSI TOEs made by 

| Adaptec Corp. to cut the CPU 
| utilization on his Microsoft 


| to two Network Appliance Inc. | 


Exchange e-mail and Oracle 
database servers by up to 15%. 
The systems are backed up 


| - ‘cof? 

| file servers over an iSCSI- 

| based storage-area network, 

| which MacNeill said he chose 


because it’s five times less ex- 


| pensive than a Fibre Channel 


TCP/IP Offload 
Engines 


® Typically cost about one quar- 
ter the price of Fibre Channel 
host bus adapters 


# Use Ethernet networks to 
transport block-level data 


Poe eee eessseeeseeeseeesesere 


= Can offload up to 60% of 
TCP/IP-related processing from 
an application server's CPU 


Poe e ee eeesseeesresseeeeeeees 


@ Support encryption technolo- 
gies, such as the IPSec protocol 


| SAN and far less complex. 
“The only reason we’re buy 

ing TOE cards is because of 
iSCSI,” MacNeill said. The 
amount of data that the health 

| care staffing firm needs to 

| store on its SAN is growing 

rapidly. “Especially with Sar- 

banes-Oxley driving [e-mail 

| retention], we expect to hit 

| close to 1OTB of capacity by 

| the end of this year,” he said. 

Tony Asaro, an analyst at 

Enterprise Storage Group Inc. 
in Milford, Mass., said the 
combination of iSCSI and 
TOEs is becoming more wide- 

| ly deployed. Asaro said he 

| knows of more than 300 iSCSI 

| SANs in production use, al- 

| though he didn’t have any sta- 

| tistics on TOE adoption. 

| Alacritech Inc. in San Jose 
this month released a TOE 

| that uses Microsoft Corp.’s 

| iSCSI driver and has a list 
price of $599. Intel Corp. and 

| Adaptec in Milpitas, Calif. 
released similar products 
last year at prices ranging 


NEW SOFTWARE 


| 
| 
| 


Novell announced these 
products at last week’s CeBIT 
show in Germany: 

= SUSE Linux 9.1 Personal and 
Professional editions, both 
based on the Linux 2.6 kernel. 
Priced at $29.95 and $89.95, 
respectively. 


= GroupWise 6.5, an upgrade of 
Novell’s end-user collaboration 
software that will run on Linux 
separately from NetWare. 

No charge for existing Group- 
Wise users. 


= ZENworks Patch Manage- 
ment, an add-on to ZENworks 
systems management software. 
| Priced at $18 per device. 

| son County Community Col- 

| lege in Overland Park, Kan. He 
| added that he’s worried about 

| centralized desktop manage- 
ment, but he hopes that will 

| be addressed by the expected 

| integration of ZENworks and 


| Red Carpet. @ 45596 





from $400 to $600. 
Analysts said TOE technol- 

| ogy should receive another 
boost when Microsoft ships a 
native software driver that 
will provide a standard inter- 

| face between the devices and 
server versions of Windows. 

| But that’s not imminent. 
Microsoft said the TOE archi- 

tecture is due for delivery at 
about the same time as the 

| Longhorn version of Win- 

dows, now expected in 2006 

| (see story, page 5). 

Josepk Meier, chief technol- 

| ogy officer at Stargate Digital 

| in South Pasadena, Calif., is us- 

ing Alacritech TOEs on 16 of 

his file servers with direct- 

| attached storage in an effort to 

| reduce CPU utilization by up 

| to 60% while transmitting 
video streams to TV networks. 

The visual-effects company 

| moves a large number of high- 

| resolution video frames, Meier 

said. “Consequently, our serv- 

ers were spending a lot of time 

| doing TCP/IP housecleaning.” 

Meier said the TOEs have 

| generated a return on invest- 

| ment by eliminating the need 

to install a Fibre Channel 

| SAN. “So far, they’ve proven 

| their utility,” he said. @ 45398 
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Wireless Sync From Verizoa 


By using Wireless Sync and the latest PDA’s and Smartphones from Verizon Wireless, you can help your workforce take care of 
business at all times. Another example of why, for all your company’s wireless needs, we mean business. 


Contact our business representatives at 1.866.899.2862 or log on to verizonwireless.com. 
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A constantly changing business needs IT that changes 
with it. HP OpenView management software, used by every 
Fortune 100 company, lets you see, control and automate 
a mixed IT environment from any location. The result? 
Your IT stays-in sync with the demands of your business, 
and suddenly change doesn’t seem like such a scary thing. 
www.hp.com/info/openview 
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IBM Sets Target of 
40,000 Linux PCs 


IBM hopes to have 40,000 inter- 
nal desktop Linux users by year’s 
end as part of a push to install the 
open-source operating system on 
its client devices [QuickLink 
44121], said Scott Handy, IBM’s 
vice president of worldwide Linux 
strategy. But some users may not 
save money by switching to Linux 
PCs, Handy added while speaking 
at the Open Source Business 
Conference in San Francisco. 


European Officials 
List Oracle Concerns 


The European Commission con- 
firmed that it has sent Oracle 
Corp. a statement of objections 
about the company’s proposed 
takeover of PeopleSoft inc. The 
statement, a normal part of merg- 
er reviews by the commission, 
lists reasons why the hostile bid 
could harm software competition 
in Europe. Oracle said it was 
“pleased to have clarity on what 
the commission’s key issues are.” 


Microsoft Aims to 
Localize XP, Office 


Microsoft Corp. said it plans to 
work with government bodies in 
various countries to make Win- 
dows XP and Office Standard Edi- 
tion 2003 available in more lan- 
guages. The company will offer 
Language Interface Packs that 
can be installed on top of the two 
products to provide localized lan- 
guage support. Microsoft said it 
hopes to double the number of 
supported languages, to about 80. 


Short Takes 


ER 
. 


in Dallas said it has signed a 
10-year dea! to manage some of 
the IT systems and business oper 
ations at General Electric Co.’s 
shared financial service center in 
Fort Myers, Fla... . SAP AG plans 
to start reselling the Crystal En- 
terprise reporting tools as part of 
a deal with Business Objects SA. 


EC Considers Rules 
or Irade Automation 


Seeks feedback on straight-through 
processing, faster settlement cycles 


BY LUCAS MEARIAN 
HE U.S. Securities 
and Exchange Com 
mission is weighing 
the idea of mandat- 

ing that financial services 

firms shorten their stock-trade 
confirmation and settlement 
cycles and fully automate ex- 
changes of settlement data. 

The SEC on March II issued 
a letter seeking comments 
on a variety of proposals for 
improving the security and 
efficiency of the trade settle- 
ment svstem and helping com- 
panies do straight-through 
processing (STP) of trades 
with one another. 

In a statement last week, 
John Panchery, managing di- 
rector of systems and technol- 
ogy at the Securities Industry 
Association in New York, 
lauded the SEC’s effort “to 
streamline the pipeline used 
for handling securities trans- 
actions.” 


However, SIA spokeswoman 


Margaret Draper acknowl- 
edged that it would be a chal- 
lenge to get financial manage- 
ment firms to spend money on 
STP technology when a return 
on investment may not be as 
obvious for them as it is for 
the investment banks that sell 
stocks. “But we’re working 
with the buy side,” Draper 
said. “It’ll be a more efficient 
process all around.” 

The SEC’s proposals in- 
clude creating a new 
rule requiring broker- 
ages to complete the 
trade confirmation and 
affirmation process on 
the date a trade takes 
place, or T+0. In addi- 
tion, the SEC said it’s 
seeking feedback on re- 
ducing the settlement 
cycle from the current 
three days to one, or 
[+]. The commission 
originally said it might 
create new rules man 
dating the use of STP 


Cisco Expands Switch Line, 
Supports 10 Gigabit Ethernet 


BY MATT HAMBiEN 
Cisco Systems Inc. last week 
announced a series of addi- 
tions to its Catalyst switch 
line, including devices with 10 
Gigabit Ethernet capabilities. 
For example, a new Catalyst 
3750 edge switch with a 10 
Gigabit Ethernet uplink port is 
due for release late this month 
at a starting price of $20,000. 
Cisco also introduced two 10 
Gigabit Ethernet modules, one 
for use with copper cables in 
data centers at distances of up 
to 15 meters for clustering 
servers and other IT equip- 
ment. The other module sup- 
ports multimode fiber installa- 
tions covering distances of up 
to 300 meters, Cisco said. The 





two products are priced at 


$600 and $4,000, respectively. 


McGill University in Mon- 
treal has been beta-testing 20 
Catalyst 3750s with the 10 Gi- 
gabit Ethernet uplink capabil- 
ity for the past two months, 
said Quan Nguyen, associate 


| director of systems engineer- 


OTHER ANNOUNCEMENTS 


oy YF) 

supervis 
Gigabit Ethernet module and soft- 
ware updates supporting content 


aM rete 
switching, SSL. IPsec VPNs and | 


Clare acme Uicwe eee eee 


or VET Ay Se] bleh te) gears 
with 10 slots, plus a new Supervisor 
eagle Tem at ien 


and T+] two years ago [Quick- 
Link 29950]. 

“This kind of thing is going 
to generate push-back. It’s real 
simple: Brokers 
don’t want to do in- 
dustry projects,” 
said TowerGroup 
analyst Robert Iati, 
referring to IT in- 
vestments that are 
widespread and 
don’t offer any differentiation. 

Needham, Mass.-based 
TowerGroup estimates that 
achieving T+] would cost the 
financial services industry 


The SEC is seeking comment 
on several IT-related proposals. 


ing at the school. McGill is 
trying to expand the amount 
of available bandwidth be- 
tween its music performance 
venues and recording studios, 
so student recording engi- 
neers can take live video and 
audio streams from the perfor- 
mance halls via IP and mix 
them, Nguyen said. 

“We're doing high-end au- 
dio and video research,” he 
said. “We keep pushing more 
bandwidth to the music de- 
partment, but they keep ask- 
ing for more.” Nguyen noted 
that the school uses a total of 
about 700 Cisco switches and 
sees no need to consider alter- 
native vendors. 

High costs have been a ma- 
jor factor in slowing the adop- 
tion of 10 Gigabit Ethernet 
technology, said Zeus Kerra- 
vala, an analyst at The Yankee 
Group in Boston. But the situ- 
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more than $8 billion. “Just 
when money becomes avail- 
able, why throw it at some- 
thing industrywide, boring 
and that doesn’t create a com- 
petitive advantage?” Iati said 

Even the SIA isn’t pushing 
hard for adoption of T+1 set- 
tlements. Two years ago, the 
trade group rescinded a mid 
2005 deadline it had set for the 
industry to move to 
T+1 in favor of pro- 
moting STP, which 
involves creating 
interconnected 
networks that let 
data flow from bro- 
kers and dealers to 
the back-end systems of banks, 
brokerages and clearinghous- 
es. Currently, many broker- 
ages still use fax machines and 
phones to handle that process. 

Boston-based Omgeo LLC 
offers a trade-matching ser- 
vice that acts as a central hub 
and manages the electronic 
handshakes between systems 
at different companies. Lee 
Cutrone, managing director of 
industry relations at Omgeo, 
said he sees the SEC’s move as 
“a very positive thing” be- 
cause it refocuses the indus- 
try’s attention on STP. 

“There were some folks 
who were saying, ‘OK, there’s 
no date, so let’s back-burner 


this, ” said Cutrone. @ 45588 


ation is changing as prices fall, 
he said, adding that 10 Gigabit 
Ethernet now “is going into 
the general enterprise, not just 
academic settings.” 

Health Net Inc. recently de- 


| ployed new network analysis 
| software modules that Cisco 


also announced last week for 
its Catalyst 6500 switch line 
(see chart). HealthNet is using 
the software on six Catalyst 
6500s to do remote trouble- 
shooting and analysis of voice- 


over-IP services, said Jeff 


Jacobs, a senior network de- 


| sign engineer who works at 


the company’s data center in 
Sacramento. 

The network analysis 
software “has solved a lot of 


| different requirements, since 


it didn’t require new manage- 
ment tools or rack space or 
much of a learning curve,” 


| Jacobs said. @ 45591 
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Users Cite Promise, Perils of CRM Apps 


Higher sales are among the potential 
benefits, but usage issues can be vexing 


BY MARC L. SONGINI 

BALTIMORE 

Despite lingering skepticism 
about the effectiveness of 
CRM applications, some users 
last week said the software 
can provide payoffs such as 
higher sales, improved effi- 
ciency and increased cus- 
tomer satisfaction — if it’s 
used in the right way. 

That was the catch cited at 
Gartner Inc.’s Spring CRM 
Summit here by a half-dozen 
IT managers and other atten- 
dees whose companies are 
currently in varying stages of 
CRM rollouts. 

Scot Struminger, vice presi- 
dent of IT for corporate head- 
quarters systems at FedEx 
Corp., said one of the keys to 
success on an installation of 
Amdocs Ltd.’s ClarifyCRM 
call center applications was 
close cooperation between 
the package-delivery compa- 
ny’s IT staff and business 
managers. 

For example, prior to the 
CRM project, FedEx aggregat- 
ed transactions with corporate 
customers at the overall ac- 
count level. But Struminger 
said that when IT workers be- 
gan talking to prospective end 
users about the new software, 
they realized that the compa- 
ny’s definition of customer had 
to be changed. “You had to 
capture interaction at the indi- 
vidual level,” he said. 


Drop in Call Volume 
FedEx went live with Clarify- 
CRM at its Memphis call cen- 
ter in 2001 and now has about 
3,000 workers using the appli- 
cations. By using the Amdocs 
software to push customers to 
the company’s Web site, and 
thus resolve problems more 
quickly and reduce the need 
for follow-up phone calls, 
FedEx has cut its daily total 
number of incoming calls by 
89,000 to about 600,000 — a 
13% decrease. 

But CRM software's ability 
to help users process calls 


more quickly or sell more 
products to customers aren’t 
the only priorities that IT 
managers have to worry 
about, Struminger noted. “It’s 
not all about the [call] handle 
time,” he said. “The customer 
is hard to acquire, and you 
should treat them the way 
they want to be treated. The 
software is a tool, but CRM is 
a whole culture.” 

Another way of making 
such a system work is to re- 
quire that the workers using 
the software be accountable 


for making it work, said Cyn- 
die Beckwith, vice president 
of customer experience at 
the California State Automo- 
bile Association in San Fran- 
cisco. The AAA affiliate uses 
campaign management and 
analytical CRM applications 
from E.piphany Inc. Beckwith 
said the tools can consolidate 
customer information from 
various databases and deliver 
the information in a single 
screen to marketing workers 
and data analysts. 

When the association went 
live with the software, Beck- 
with said, it changed the per- 
formance goals of the end 
users and told them to use the 


customer information stored 
in an E.piphany data mart 

in an effort to increase the 
success rates of marketing 
campaigns. 

David Zink, CIO at Blue 
Cross & Blue Shield of Rhode 
Island, advised companies in- 
stalling CRM applications to 


The software 
= # isatool, but 
CRM is a whole 
culture. 
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IT, Business Units Look for Ways 
To Better Align Their Operations 


I'l’ execs cite poor 
communication as 
a barrier, survey 
results show 


BY THOMAS HOFFMAN 
Business executives often are 
quick to point out the short- 
comings of IT managers, in- 
cluding their inability to talk 
about technology in business 
terms. But the lack of align- 
ment between IT and business 
units is a two-way street, ac- 
cording to survey results that 
were released last week. 

The survey, done by New 
York-based Deloitte Consult- 
ing and IDG Research Ser- 
vices in Framingham, Mass., 
showed that many IT man- 
agers think business leaders 
themselves need to do a better 
job of communicating corpo- 
rate strategies and goals to 
their technology counterparts. 

Nearly two-thirds of the 200 
IT executives polled said that 
ineffective communication 
between business and IT man- 
agers represents a significant 
or moderate challenge within 
their companies (see chart). 
About half of the respondents 


also cited a lack of funding for 
improving IT/business align- 
ment as a big barrier. 

Steve Scott, vice president 
of IT at Vision Service Plan in 
Rancho Cordova, Calif., said 
the key to establishing effec- 
tive communications “is to 
have people who own that 
process and keep everyone 
honest about their responsibil- 
ity to keep both 
the IT staff and 
business units 


well informed. 


ALIGNMENT GAP 


chief technology and e-com- 
merce officer at the $4.6 bil- 
lion provider of life insurance, 
retirement plans and wealth 
management services. 


More Oversight 

Project managers used to up- 
date executives on big tech- 
nology investments only upon 
“special request,” Glazier said. 
Now, the workers 
who are leading 
IT projects must 


report every 


That is the only 
way we'll get the 
necessary level of 
engagement to be 
successful.” 

Some compa- 
nies are trying to 
bridge the align- 
ment gap by tin- 
kering with their 
IT governance 
models. For exam- 
ple, Philadelphia- 
based Lincoln Na- 
tional Corp. has 
taken several steps 
to tighten up its 
governance proce- 
dures over the 
past 12 months, 
said Jason Glazier, 


thee 


Said “ineffective 
Pee ed 
business strategy and 
PE aa) 
PISCE Tuan 
and IT management” 
PMS eGo me 
Celery 


Ue 


Reported that their 
UIE eg) 
“extremely success- 
ful” at aligning IT 
plans with corporate 
Byte Crd 


three months to 
Lincoln’s seven- 
person IT execu- 
tive steering com- 
mittee on how 
budgets and de- 
livery schedules 
compare with the 
original plans. 

In addition, 
Glazier said most 
of the business 
units at the com- 
pany, which oper- 
ates under the 
name Lincoln Fi- 
nancial Group, 
have set up more 
rigorous project 
approval and pri- 
oritization proc- 
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try to keep the software as 
“vanilla” as possible. “Don’t 
change the system if you can 
help it,” Zink said, adding that 
IT managers also should make 
sure they have commitme 
of support from top corporate 
executives. He reported to the 
health care provider’s chief 
operating officer 
CRM project 
The Providence-based com- 
pany in December went live 
with a call center application 
from Pegasystems Inc. that re- 
placed a set of homegrown 
*n-screen applicatior 
e software is mea 
10de Island’s 680,000 I 
cross & Blue Shield me 
check on the status of clair 


1 1-1 ° 
or the avallabDility of fitness 


programs, Zink said. @ 45580 
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“Tt all depends or 
business views IT 
said. At some companies, busi- 
ness leaders recognize the im- 
portance of investing in IT to 
achieve corporate g¢ he 
noted. But, he said, “at the oth- 
er end of the spectrum, busi- 
ness views IT as a necessary 


evil.” @ 45598 
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Diverse Skills Can He 
Workers Avoid Offshore 


ITAA workshop stresses advantages of 
having a multidisciplinary background 


BY PATRICK THIBODEAU 


O THRIVE in today’s 

workforce, IT pro- 

fessionals will need 

a mix of industry- 
specific skills and a multidis- 
ciplinary background as more 
programming and coding 
work is moved offshore. 

That was the overriding 
message at a workforce forum 
last week coordinated by the 
Information Technology Asso- 
ciation of America. The work- 
shop included several large IT 
vendors and universities with 
technology programs. 

One of the things Microsoft 
Corp. looks for in prospective 
employees is people “who can 
think about the silos in which 
they have been educated,” said 
Marland Buckner, public poli- 


Continued from page 1 


HP e3000 


stop support is two and half 
years away, it has become an 
urgent issue for some users. 
Ken Sletten, who manages 
e3000 systems at a federal gov- 
ernment facility in Wash- 
ington state that he asked not 
be further identified, said 
transferring knowledge about 
MPE to a third party won’t be 
easy. “It’s a pretty complex 
process, and as time goes on, 
the number of people within 
HP who know how to do this 
is going to [decline more and 
more],” he said. 

Moreover, if users know 
that a third party will take 
over source-code support, it 
may allow them to slow their 
migrations from e3000 to oth- 
er systems. “The importance 
of having the decision this 
year is so that users can make 
future plans,” said Paul Ed- 


| was for a decision 
| from HP by the 
| second half of this 


| MPE source code 
| to one or more 
| third parties. 


| the need to make 
| a decision this 

| year, said David 

| Wilde, HP’s e3000 business 
| manager, who stressed that 


cy manager at the vendor. One 
clue that someone may have 
this ability is an advanced de- 
gree in computer science as 
well as English, Buckner said. 

“That is someone with skill 
sets significantly different 
than the traditional computer- 
science grad,” he said. 

At PeopleSoft Inc., the 
12,000-employee workforce 


| has evolved to focus on indus- 
| try-specific approaches that 

| are also localized for interna- 
| tional users, said Steve Eberly, 
| a vice president in the compa- 
| ny’s public services solution 


consultants division. “The 
workforce has matured to the 
point where they have become 
specialist rather than general- 
ist,” he said. That means work- 


| ers need to know how to add 


business value in certain areas 


wards, an e3000 consultant in 
Carrollton, Texas. 

An online survey released 
last week by Interex, the Sun- 
nyvale, Calif.-based HP user 
group, backs the demand for 


quick action by HP. The top is- | 
| sue cited by the 


223 respondents 


year on licensing 


HP doesn’t see 


the company must act in “the 


| best overall interest” of the 
; e3000 user base. 


Wilde said a decision to li- 
cense the source code might 
prompt some customers to re- 
place their transition plans 





There is 

clearly a 
business case 
for continuing 
MPE’s life be- 
yond 2006. 
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DONNA GARVERICK, 
LONGS DRUG STORES CORP. 


in addition to having technical 
know-how. 

The kind of work that is 
likely to be moved offshore is 
the actual “construction 
phase” of a project, where re- 
quirements can be spelled out 
in detail, said Eberly. 

Among the kinds of IT 
workers that defense and gov- 
ernment IT contractor 
Northrop Grumman Corp. 
needs are those who can han- 
dle high-end IT projects, such 
as enterprise and network ar- 
chitects, program managers 
and ERP specialists, said Mari- 
lyn Stewart, the company’s se- 
nior director of federal enter- 
prise solutions. 

Because many of Northrop 
Grumman’s workers require 
security clearances, moving 
work offshore isn’t an option. 


| The clearance requirement 


slows down hiring, which has 
prompted the company to em- 
phasize retention programs. 


| with an alternative that may 


not meet their needs, simulta- 
neously hurting HP business 
partners that provide migra- 
tion services. “We don’t help 
anybody if we do damage to 
that overall value chain,” he 
said. 

But Wilde said 
HP is also sensi- 
tive to the needs 
of customers who 
will be running 
e3000 systems 
beyond 2006. HP 
expects “to make 
appropriate ad- 
justments in our 
plans,” he said. 
He said the com- 
pany has been receptive to 
customers’ needs, citing the 
recent decision to extend sup- 
port for MPE Version 6.5, 
which had been due to end 
this year, to 2006. Versions 7 
and 7.5 are also being support- 
ed through 2006. 

The issue is becoming in- 


| nical skills to produce leaders | 


| business needs. Such programs 





| raised complaints about HP’s 
| actions in e-mail he sent to a 


| OpenMPE. HP subsequently 


| from voicing their opinions 


| has been migrating off the 





ry 
AX 


Because many of 
Northrop Grumman’s 
workers require security 
clearances, moving 
work offshore isn’t an 
option. The clearance 
requirement slows down 
hiring, which has 
prompted the company 
to emphasize retention 
programs 


Ip 


Education programs are 
also broadening. Many univer- 
sities and colleges offer IT 
programs that bring together a | 
range of disciplines and tech- 


who can align technology with 


are now trying to gain recogni- 
tion under a formally accredit- 
ed program; about 70 schools 
are involved in the effort. 

Kurt Linberg, dean of Capel- 
la University’s School of Tech- 


creasingly heated. Sletten 


mailing list, attaching corre- 
spondence between HP and 


pursued an effort to get Open- | 
MPE members to sign nondis- 
closure agreements, raising 
concerns that public discus- 
sion of the matter could be 
curtailed. However, Wilde said 
members won't be blocked 


about user needs. 


Domino Effect 


Longs Drug Stores, meanwhile, 


e3000 as part of a multimil- 
lion-dollar project, but Garver- 
ick said she believes the e3000 
will be running mission-criti- 
cal systems beyond 2006. 
Being able to update the 
source code will be important, 
Garverick said. For instance, 
the e3000 uses FTP processes, 





but if the FTP process was 


nology in Minneapolis, said 
accreditation is necessary to 
ensure the quality of IT pro- 
grams at the undergraduate 
level. “IT degree programs are 
popping up all over the coun- 
try, and there is no ability to 
ensure quality,” he said. 

Accreditation is important 
to corporate hiring managers, 
who sometimes won’t consid- 
er a job candidate’s academic 
records unless they come 
from an accredited program, 
said Linberg. 

But Trentwell White, corpo- 
rate liaison at Chicago-based 
National-Louis University, 
said that while accreditation 
may resound with human re- 
sources managers, an IT hir- 
ing manager will want to 
know about a job candidate’s 
skills and expertise. 

“So I’m not sure that accred- 
itation — which the education 


| community keeps trying to 


build up because it brings 
them students — is really the 


key,” said White. @ 45599 
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changed on an Intel-based sys- 

tem, the e3000 code would 

also have to be adjusted. 
Interex’s customer advo- 


| cate, Debbie Lawson, said the 
| e3000 user base may have 


been as large as 40,000 at one 
time, and previous surveys in- 
dicate that about 75% plan to 
migrate off the system. 

In earlier years, as many as 


| 1,200 responded to HP e3000 


surveys, said Lawson. But she 
believes that the current re- 
sponse from 223 users is “a 
good representation of what 
this vocal minority wants.” 

HP has developed programs 
to move users to its HP 9000 
system running its HP-UX 
version of Unix. Lawson said 
her view is that the reason HP 
is being noncommittal about 
third-party source-code li- 
censing is that it “doesn’t want 
the migration to be slowed 
down. They want to get peo- 
ple on other platforms as soon 
as possible.” @ 45595 
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Is Software Assurance 
Right for Your Business? 


UCH HAS BEEN WRITTEN 


ibout Microsott’s Software Assurz 


| | 
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When Primera Engineers signed on 
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ADVERTISING SUPPLEMENT 


When I was hired, we had five operating systems in 
use across the company. We couldn’t eftectively share documents or 
support newer applications, and some computers couldn’t even 


print. Management wanted this fixed permanently and immediately. 


Software Assurance helped us get current, and it will help us stay 


) ; 1: ; ; P 
current so we don l slide back Into that situation again. 


—JEREMY LUNDIN, !T Manager, Primera Engineers, Ltd 


building new servers to training end users can better avoid noncompliance. This is a 
maintaining spam filters and replacing printer welcome benefit for Reid Nettle, Network 
cartridges. Managing licenses is one thing on Administrator at GT Development Corporation 
which they want to spend less time. Software He inherited an IT department where records 
Assurance gives time back to the CIO by 
making software license management simplet 
Consider the following 

¢ Software Assurance Keeps You From 
Falling Behind. Many ClOs say they would New Version Rights 
like to upgrade more frequently and that putting Spread Payments Out 
off upgrades inevitably results in running out Problem Resolution Support 
dated and unsupported technology. Or, they 
only upgrade one part of their network, making were not well maintained and the acquisition of 
it tougher and more costly to track and support new licenses was not always timely. IT stafters 
multiple versions. By acquiring Software were in the t loading software trom a 
Assurance for software the company has licensed main CD, without trackin 
from Microsoft, the IT manager has the freedom deployed. Management decided to get serious 
to upgrade everything at the same time, main ibout staying compliant, and 


help. Nettle says that 


taining a standard plattorm across the company Software Assurance for hel; 
* Software Assurance Helps You Stay it’s now easier to stay compliant—since the 
Compliant. Most CIOs take license compli server or PC has an underlying license with 
ance seriously, but it can be challenging to Software Assurance, generally they can load 
keep license acquisition in any version they like without worrying about 
pace with software deploy under-licensing 
The enhancements to nent schedules. This can ¢ Software Assurance Helps Gain Budgetary 
STO eCS Tei s) ead to the risk of noncom Control. Another advantage of Software 
PUM Cl cc pliance. That's a concern Assurance is the way it helps CIOs avoid the 


} 


| 
or many IT managers expensive habit of purchasing software licenses 


Productivity and their CEOs one at a time. Since the next version is 


S Because upgrades under already budgeted tor, they can deploy it with 
“ upport licenses covered by out making another budget request. Similarly 
Tools Software Assurance can be one can upgrade servers, desktop applications 


case. deployed as and when they and operating systems at any time, without 
| raining are needed, IT managers making special budget requests that require 
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The ClO Action View: 
Enhancing Support 


AT MANY COMPANIES, THE BURDEN 
of technology support falls on 
of a resource constrained IT statf 
sills and multiple priorities. Software 

\ssurance i number of free support 
benefits to 1 } t s life easic 

¢ Complimentary Server Support One « 

1c most well received benefits of Sottware 
\ssurance for servers is free break/fix support 
for Open License Value, Select and Enterpris¢ 
\greement customers. The details vary (limit 2 
incidents for Open License Value, no limit for 
Select and EA) so you should consider how 

| 


much support you need Vy en vou ordet your 


next server license with Software Assurance 
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ADVERTISING SUPPLEMENT 


We try to stay compliant, but we load software 


regularly and sometimes lose track of what is deployed 


on each 


. rye 1 7 4 . 1 
PC. With Software Assurance, you can just count the number of 


SA licenses vou have and 1 
‘-d which 


. ] 
Sler to track. 


1 
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The Business Manager 
View: Ensuring 
Business Growth 


WHILE THE CIO IS FOCUSED ON 
managing the company’s infrastructure, the 
CEO is focused on the company’s growth. And 
while Software Assurance may appear to be 
largely a technok dec Ision, It also has impor 
tant consequences for the business executive 

¢ Software Assurance Helps Employees 
Become more Productive. One of the most 
compelling benefits of Software Assurance is 
the Home Use Program, which provides low 
cost Office licenses for employees’ home use 
With the rising importance of remote comput 
ing and work-at-home arrangements, many 
business managers find this lets their work 
force get more done w ithout Inc remental cost 
to the company. And because the license is 
between Microsoft and the end user, your IT 
staff does not have to track usage 

¢ Software Assurance Reduces Business 
Risk. Today more than ever, the ( EO feels 

person ally responsible for 


the actions of the company’s 


1e number of P¢ 


—REID NETTLE, Network Administrator 


’s. You don’t have to 


version is deployed on each computer. Compliance 


GT Development Corp 


the risk to business by providing additional 
assurance that a company is licensed to the 
software In use 

¢ SA Helps You Protect—Or Build—A 
Competitive Advantage. While some busi 
nesses have reined in IT budgets, others 
continue to invest in more advanced and 
secure technologies. They believe this gives 
them a number of advantages—for example 
access to new line-of-business applications, 


} 
lower support costs and more secure networks 


# eLearning 
= Home Use Program 
= Employee Purchase Program 


That’s a strategic decision your company 
leaders will need to make. Software Assurance 
is your investment, in good times and bad, 
in the leading technology. In the end, CIOs 


must decide which technology and services 


represent the most bang for their buck. SA, 


For More information 


on Software Assurance employees, and wants to with its ability to beef up employee skills 


1 ‘ 
To learn more about the enhancements minimize Dusiness risk through training, or prov ide productiy ity 


: via tal ii cane he ; : : 
to Microsoft's Software Assurance One such risk is exposure boosters to business users, can provide key 
for volume licensing programs, go to 


; support in building a more productive, 
www.microsoft.com/licensing/programs/sa/ 


to licensing non-compliance. 


Software Assurance reduces value-driven company. « 


or contact your Microsoft Account Manager 
erred Reseller. Contact your Microsoft 
er to calculate your own rate of 
return. We encourage you to share this 


2nt with your peers 





Got a mobile or wireless 
solution so good it’s 
worthy of an award? 


Nominate it for Computerworld’s (cg) 
“Best Practices in Mobile Mobile & ponee 


bile 
& Wireless Awards Program!” weiss eg RACTICES 
Computerworld is seeking IT user-organization case —_ tN MOB | LE 


study submissions for consideration and recognition. — & WI RE aN ae 


99 
TA AWARDS PROGRAM 


This program will evaluate, select and recognize ten Mobile and/or Wireless 
Technology “Best Practices” based on case studies highlighting successful or 
noteworthy solution implementation projects and deployments in the 
following categories: 

e Business-critical Applications 

e Expanding Wireless for Better ROI 

¢ Business Transformation 

e Wireless as an Advantage for the Small/Medium Business 

e Office of the Future 


Nominations are welcomed from IT Users/Implementers; Systems Integrators/Consultants; IT vendors on behalf 
of customers, or, their own In-House Deployment; and PR firms on behalf of clients. Multiple submissions of case 
studies describing different deploymenis per company/organization will be considered. 


Winners will be featured in a special Computerworld supplement profiling the company and submitted case study. 


Submit your nomination Online! 
You'll find the nomination form and learn more about Mobile & Wireless World at: www.mwwusa.com 
But hurry! The deadline is Monday, April 12th at 9:00pm Eastern time. 


PRODUCED BY: AWARDS PROGRAM SPONSORED BY 


COMPUTERWORLD emi intel 





The risks of 


noncompliance 
are too high. 


Fmerging government regulations are being enacted at a rapid 
rate and there is no end in sight. The risks ofnoncompliance 
are high and IT departments are being hit from all angles. Your 
company is relying on you for solutions. Now you can rely on us. 
The IT Compliance Institute (ITCi). 


Make sure you have the information 
and tools you need. 


ITCi’s IT Compliance World, Spring 2004, provides you with 
mission-critical information on emerging regulations that impact 
IT, industry best practices and case studies, timely research, 

and leading technology solutions. By delivering high-quality, 
vendor-neutral education and an ideal forum for networking 
with peers, ITCi equips you with tools and techniques you need 
to save time and money, and avoid the legal ramifications of 
noncompliance. 


IT Compliance World, Spring 2004 


Conference Features 
¢ Well-defined tracks on regulations for privacy and security, governance, and financial services 
¢ More than 30 courses on topics such as: 
- IT Risk Vulnerability—Metrics and Mitigation Strategies 
- Aggregating Regulatory Requirements to Simplify Compliance 
- Preparing for Real-Time Disclosure under Sarbanes-Oxley Section 409 
- Basel II Strategies, from Aggregation to Disclosure 
- Ant-Money-Laundering Strategies (AML)—A Pragmatic Approach 
- Processes and Products for the USA Patriot Act in Financial Services 
¢ Solutions Marketplace featuring the latest technologies from leading vendors and consultancies 
¢ Panel discussions with leading experts and peer networking sessions 


¢ Hospitality suites and one-on-one consulting 


www.|TCinstitute.com ee 


Media Partner: COMPUTERWORLD 
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| ternally. The mainframes are that some pieces need to be 
Sears Taps CSC for $2B Outsourcing Deal analy caiieniad by IBM un- henievek teaacnaaal: 


| der an existing outsourcing Working with CSC on the im- 
BY TODD R. WEISS | and core retail systems won’t | Lands’ End Inc.,whichSears | contract, he added provements should yield sav- 
Following through on plans be included in the outsourcing acquired in 2002. Brathwaite Sears decided to do more ings that will let Sears focus 
disclosed by its CIO in Janu- _—| deal, nor will the separate IT | said Sears will continue to | outsourcing after a review of more resources on its retail 
ary, Sears, Roebuck and Co. is | operations of catalog retailer manage the retail systems in- | its IT infrastructure showed systems, he said. @ 45543 


negotiating with Computer 
Sciences Corp. on a partial IT 


outsourcing deal that’s expect- | 
ed to be worth about $2 billion | | 


over the next 10 years. 

The deal would give CSC 
responsibility for managing 
much of the IT infrastructure 
at Sears and would affect 
about 260 of the retailer’s 1,160 
IT workers, although Sears 
this month said it expects CSC 
to hire “substantially all” of 
the affected staffers. | 

A final agreement should be | 
signed during the second 
quarter, according to Sears 
The infrastructure technolo- 
gies that are due to be out- | 
sourced to CSC include 
servers, desktop PCs and oth- 
er client devices, voice and 
data networks, and the sys- 
tems that support Sears- 
related Web sites. CSC would 
also handle help desk opera- 
tions as well as IT asset and 
risk management, said Sears 
spokesman Chris Brathwaite. 

In a statement, Sears CIO 
Gary Kelly said the services 
provided by El Segundo, Calif.- 
based CSC should “heighten 
the stability and reliability of 
Sears’ technical infrastructure” 
and reduce the cost of future 
IT improvements. He added 
that CSC “will also provide fair | 
and equitable treatment” for 
the affected IT workers. 

At a retail IT conference 
two months ago, Kelly told 
Computerworld that he 
planned to outsource some of 
Sears’ IT operations to cut | 
costs and improve profit mar- | 
gins [QuickLink 44112]. Inad- | 
dition to CSC, he named IBM_| 





Global Services, Hewlett- 
Packard Co., Electronic Data 
Systems Corp. and Affiliated 


Computer Services Inc. as the | | 
vendors vying for the deal. | | 


The company’s mainframes 


MORE NEWS 





deal with Hewlett-Packard to include its 
accounts payable operations 


QuickLink 45500 
www.computerworld.com 


| 
Procter & Gamble expands an outsourcing | 
| 
| 
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REMEDY 
SERVICE MANAGEMENT SOLUTIONS 
1 Pp alliance partners 
Pa acne ase) 
1st to be certified as — acer Bye) Vero] ate 40) e0-11) 


ITIL-compatible 
Aaa 818 | 


oi 10,000,000 


over 13,500 trained 


developers globally ten million users across 


7,000 customers globally 





Remedy is the leader in Service Management solutions. Our numbers speak for themselves. 


Yet, there are other numbers important to Remedy. Operating cost reductions, improvements in customer 
satisfaction, increased employee productivity, shorter time to value—the bottom-line numbers you will achieve 
by using Remedy’s out-of-box best practice applications to automate service management processes. 


Your success depends on those numbers. Remedy delivers them. 


www.remedy.com/strength Fo Remedy 


or call us at 1.888.294.5757 










Great Moments at Work. 





Introducing the new Microsoft Office System. 


Now users can do more for themselves so you can focus on 
the important things. More than just the core suite you're 
familiar with, the new Microsoft® Office System is an integrated 
system of easy-to-use, expanded programs, servers, services, 
and solutions that help end users be more self-sufficient. 
With the Microsoft Office Enterprise Project Management 
Solution (including Microsoft Office Project Server 2003, 
Microsoft Office Project Professional 2003, and Microsoft 
Office Project Web Access), users can have access and 
visibility into all of their projects, including current status, 
integrated costs from business systems, risks, and all project 
documents—all on their own. Which might just be the most 
valuable part of it all. To find out how the Microsoft Office 


System can work for you, go to microsoft.com/officelT 


Microsoft More than what it used to be, it’s now a 
Office System comprehensive, customizable system 


Programs Servers Services 


Access 2003 PowerPoint® 2003 Project Server 2003 Live Meeting 
Excel 2003 Project 2003 Live Communications Office Online 
3 

FrontPage® 2003 Publisher 2003 Server 2003 ; 

InfoPath™ 2003 —-Visio® 2003 Exhenge —— 
yaks wes Server 2003 

OneNote™ 2003 Word 2003 SharePoint™ Portal 

Outlook® 2003 Server 2003 


Solution Accelerators 


Enabling Technologies 
Windows Server™ 2003, Windows® SharePoint Services, 
Rights Management Services 


Microsoft® —— 
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Privacy Hostages 


"VE RECENTLY GOTTEN HOOKED on a BBC 
America TV program called What Not to 
Wear, in which two witty, quintessentially 
British “style journalists” single out some 


walking fashion disaster 
for a wardrobe update 
and makeover. In the first 
scene, the show’s hosts 
merrily pounce on their 
startled sartorial slob, 
presenting her with a big 
check for an upcoming 
shopping spree and ex- 
plaining how friends or 
relations helped arrange 
the whole ambush. Lots 
of shrieking and laughter 
ensues. 

And then the hosts drop the big 
bomb: Hidden cameras have been 
tracking the hapless victim in her 
most unsuitable and unflattering out- 
fits, for all the world to see. As that 
realization sinks in, the makeover 
subject suddenly stops laughing. In- 
variably, the same horrified question 
comes next: “You’ve been secretly 
filming me?” 

That invasion-of-privacy moment 
passes quickly, and the show marches 
delightfully onward. But I wonder 
how long it will be before such can- 
did-camera entertainment becomes 
flatly illegal, plowed under the moun- 
tain of new privacy rules and regula- 
tions enclosing us and all the data 
generated about us (streaming video 
of our wardrobes included). I realize 
that data privacy is vying for a place 
alongside motherhood and apple pie 
in the public sentiment these days, but 
I wonder if we aren’t slipping over 
into paranoia as we try to build a 
fortress of legal and technical protec- 
tions around every bit of personal in- 
formation that gets loose in the world. 

Not that there’s much choice any- 
more. The sheer enormity of what IT 
departments are facing at this inter- 
section of mandated regulatory com- 
pliance, customer data protection 
and risk management was starkly evi- 
dent in our special report on privacy 
last week [“Compliance Headaches,” 


QuickLink 45078]. Big 
companies can expect to 


spend millions on privacy 


compliance programs 
and activities in the com- 
ing years, just to keep 
pace with existing federal 
laws such as HIPAA and 
Sarbanes-Oxley. Yet legal 
precedents are few, im- 
plementation procedures 
are largely experimental, 
and vaguely written 
guidelines vary from 


| state to state. The infamous Califor- 


nia Senate Bill 1386, which requires 


| notification of any unauthorized dis- 
| closures of personal information, 


calls for customer data to be encrypt- 


| ed but doesn’t specify to what level. 


“Over the past two years, we’ve 
had over 1,000 new privacy laws that 
have affected us,” said Joel Tietz, 
chief privacy officer at AXA Finan- 
cial Services in New York, who was 
quoted in our “Privacy Potholes” sto- 


| ry [QuickLink 45101]. Like many com- | 


panies, AXA is using a CRM system 
to dig into its customer data for use- 


ere | H oy NE i 
ATE MULLET 





ful trends and potential revenue op- 
portunities. But unlike many compa- 
nies, the financial firm is being ag- 
gressively attentive to mapping cus- 
tomer privacy preferences against a 
database that consolidates multiple 
applications and production systems. 
Monitoring privacy compliance in- 
side your own business is no longer 
enough, however. Your partners, sup- 
ply chain vendors and any other sup- 
pliers that access your data — partic- 
ularly those offshore and operating 


| under looser legal strictures — are 


part of the risk that senior IT man- 
agers now must protect against. 

So prepare to be held hostage to 
privacy compliance. Spending in this 
realm will gobble up increasingly 
bigger portions of IT corporate bud- 
gets in the years to come. Larger 
companies will have to set up privacy 


| compliance offices, which will run up 


additional bills for data protection 


| staffers, expert consultants and spe- 
| cialized training. 


The only effective strategy the ex- 
perts all agree upon is this: Make 
sure you're meeting the maximum 
requirements of the strictest privacy 
laws affecting your industry. 

If you don’t, you’d better update 
your own wardrobe. Your next ap- 
pearance might be on Court TV. 


@ 45550 


*(ONGRATULATE ME. WE'VE CRAFTED A PRIVACY POLICY 
THAT MEETS EVERY SINOLE REGULATION OUT THERE.” 





PIMM FOX 
Storage 


Tools You 
Can Use 


VERYONE TAKES their 

storage requirements 

seriously. Storage man- 
agement deserves the same level of 
attention. 

As your storage capacity increases 
and becomes more varied, it’s crucial 
to have tools that can get you real-time 
information about your network-at- 
tached storage, storage-area networks 
and direct-attached storage operations. 

At Owatonna, Minn.-based Federat- 
ed Mutual Insurance Co., WAN/LAN 
administrator Mark Mielke has 3,000 
employees pounding away at his stor- 
age systems. He has a typically atypical 
enterprise setup: Xiotech Corp. Magni- 
tude storage arrays, hard drives for 
servers, and cluster-type servers for 
file retention, including customer 
records and applica- 
tions. In all, depend- 
ing on how he’s got 
things configured, 
there’s anywhere 
from 2.5TB to 5TB of 
storage that has to be 
accounted for, allo- 
cated and managed. 

“We didn’t have 
any good tools to 
look into what we 
were doing with 
storage,” says Mielke. 
“We couldn’t see into the future.” 

And that’s the story with storage, 
isn’t it? Today handles itself, but you’ve 
always got to be one or two steps 
ahead of your users. 

Federated Mutual needed some- 
thing multifunctional to handle its 
SAN switches, its main storage units, 
its Windows NT client pieces and the 
Novell side. Those multiple platforms 
and vendors led the company to choose 
Dallas-based Tek-Tools Inc. and its 
Storage Profiler software. 

Mielke says installation was easy, and 
the tools provide good analysis, with 
the power to drill down into each type 
of data that Federated Mutual stores. 

“We have Storage Profiler giving us 
feedback on servers,” says Mielke, “and 
we're ramping up on all our SAN 
equipment and our switches.” He’s us- 
ing SNMP to set up alert criteria on 
hosts so that at 80% of capacity, for ex- 


Pimm FOX is a freelance 
writer in Santa Barbara, 
Calif. Contact him at 
pimmfox@pacbell.net. 
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AT&T NETWORK SECURITY PORTFOLIO. Can your network drive | 


accessible 24/7 to the people who need 


it wnile Dulid! 
delivers a broad portfolio of int ated network sex perts that a , monitor, 
solve security is yu’d expect from 
> networking company that carr 


t, every 


1 they 





: 


At any given moment, your 
operations are vulnerable to 
attacks. Hackers, viruses and 
intrusions can wreak havoc on 
your network and can disrupt 
and cripple key business 
processes and assets — costing 
your business time and money. 


AT&T can recommend and 
provide security measures 
that help prevent intruders 
from compromising your 
networks, servers, information 
and applications — protecting 
your business by strengthening 
the availability of your IT and 
networking environment. 
Now that’s keeping your 
business secure. 


e The fully managed security 
solutions provide simplified 
design, deployment and 
management. 


Completely tailored to meet 
your business security needs. 


Offers significant savings in 
capital and operating costs 
verses a Self-managed 


solution. 


Provides expert security 
networking and 24x7 
network monitoring. 


For more information, contact your AT&T 


AT&T delivers a powerful suite of integrated security solutions that can assess 
vulnerabilities, protect against unauthorized access, proactively detect attacks, 
and rapidly respond to suspicious activities or events. It’s like a virtual security 


guard to help protect your network from unwanted intruders 
AT&T's Network Security Portfolio offers a broad array of services that include 


e Intrusion detection and firewall services 
e Token and Public Key Infrastructure (PKI) authentication 


e Network scanning services 


And coupled with AT&T's professional networking expertise in the area of ethical 


hacking, policy development and assessment services for a secure solution 


AT&T Security NOC 
"g 


Networ n 


Corporate Network 


Demilitarized Zone 


AT&T 
IP Backbone 


Internet 


AT&T [Managed Security Services] was awarded the Customer Solutions 
Excellence Award — “For implementing extremely flexible management 
offerings, being the first to bring application security services to the 
market, and offering the widest array of services in the industry, AT&T 
[Managed Security Services] is awarded the Customer Solutions 
Excellence Award.” — Frost & Sullivan, July 2003 


Representative, or visit www.att.com/networking. 
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ample, Mielke’s team will be signaled. 
He can also monitor events in Win- 
dows NT, look at memory space on 
NetWare and get a real view of each 
storage point. 

The tool also makes it possible to 
normalize data into common tables for 
enterprisewide reports so there’s less 
guesswork about storage needs. Build- 
ing custom reporting tools is also 
straightforward, using either Java or 
templates built into the Profiler suite. 

The automotive unit of Siemens AG 
used similar storage management tech- 
niques to do file analysis on its net- 
work-attached storage boxes, and it 
uses the same reporting tools to check 
backup and network performance. 

This new area of storage resource 
management should help cut operating 
expenses and help users get the most 
from their storage investments. 

Big companies like Siemens can start 
by digesting small bites of their storage 
strategies and looking at the manage 
ment problem with an eye toward re- 
claiming some of the storage space 
that’s wasted because of poor visibility. 


@ 45478 


‘Tricks of 
The Futuring 
‘Trade 


ESEARCH from UCLA's 

Managing the Informa- 

tion Resource Program 
has brought to the surface three high- 
value techniques for planning for the 
future that are inexpensive to put into 
operation. 

Déja viewing. This technique, which is 
frequently used to craft insight-pro- 
ducing, behavior-changing scenarios 
of what lies ahead and what actions 
should be taken, involves looking in- 
tensely at the current period and ask- 
ing, “Has anyone experienced anything 
like this before?” 

In a workshop conducted for the IT 
Leadership Academy at Florida Com- 
munity College at Jacksonville, I asked 
that question about the situation that 
technology leaders find themselves in 
today. The assembled decision-makers 
kicked around various situations seek- 
ing analogies and came up with the 
following: 

@ The trip to hell described in 
Dante's Inferno. 

® The Clinton White House follow- 


ing the revelations about 
Monica Lewinsky. (“One 
mistake, and everybody 
hates us.”) 

@ President Bush and 
nation-building in Iraq. 
(“Long, hard slog. No real 
idea how much it’s going to 
cost or when it’s going to 
end.”) 

Two déja views had the 
most resonance for today’s 
IT managers. 

The first was the post- 
Sputnik era. The launch of 
the Russian satellite on Oct. 
4, 1957, shook an almost universally 
held belief that the U.S. would always 
be significantly ahead of the Soviet 
Union in all aspects of science and 
technology. Today, the widely adopted 
practice of outsourcing higher-end IT 
work has similarly shaken the belief 
that the U.S. will always lead the world 
in computer technology. 

The second was the first big man- 
agement-consulting fad, “scientific 
management,” which cropped up in 
the early 20th century. Frederick Tay- 
lor synthesized several existing ideas 


The Practice of ‘Intelligent Disobedience’ 
WAS QUOTED in last month's into thes 


Think Tank [QuickLink 44152] 


Thornton A. May is a 
longtime industry ob- 
server, management 
consultant and com- 
mentator. Contact him 

at thorntonamay@aol.com. 


e projects? | certainly hope 
t's not in the name of alignment 


to create a process to assist 
management in reducing 
waste through the careful 
study of work and the 
adoption of standardized 
work practices. Today, the 
processes of IT are being 
closely studied with an 
eye toward simplification, 
standardization and sig- 
nificant improvement in 
productivity. 

Bringing the future to the 
present. This concept in- 
volves projecting a future 
point in time and painting a 
picture of what you want to happen. 
Examples: During a joint session of 
Congress on May 25, 1961, President 
Kennedy looked a decade ahead and 
saw an American on the moon. And 
following the Jan. 17, 1994, Northridge, 
Calif., earthquake, a team of dedicated 
construction professionals foresaw the 
Santa Monica Freeway being reopened 
“safely to the flow of traffic in 66 days,” 
even though some experts said it 
would take two years. 

IT professionals who bring the future 
to the present envision a bold scenario 


third-party partners su 
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that people don’t believe 
happen, then they structure their activ 
ities so that they deliver capabilities 


~y can make 


that will render the competition irrele- 
vant, on time and within budget. 
Experience hitchhiking. This technique 
isa personified version of déja view- 
ing. With déja viewing, you look for 
broad-based analogs. For example, you 
ask yourself how President Ei 
responded to the challenge of Sputnil 
and whether there are lessons in that 
for crafting your response to outsourc- 
ing. With experience hitchhiking, you 


1 companies 


seek out individuals anc 
whose experiences most closely re 
semble a situation you are about to en 
ter or are thinking of ente 
you ring up these “experi¢ 
ask if you can hitchhike, or ride their 
learning curves. 

By combining these three tech- 
niques, you will ride a limo to your fu- 
ture, not someone else’s bus to a desti- 


nation you may not enjoy. @ 45464 


WANT OUR OPINION? 
More columnists and links to arct 

J are on our Web site 
www.computerworld.com/columns 


Microsoft conquered small busi 
ness with turnkey SQL Server- 
based ERP products developed by | for many compar 


nant colt 
ferent soluti 


a 


ch as Great 


saying, “The role of the IT organiza- 
tion is to have the right solution to 
the business problem, not to decide 
what really needs to be done.” This 
does not in any manner convey that 
the CIO is not supposed to actively 
contribute to the creation and im 
plementation of company strategy 
as suggested by Michael Hugos 
[QuickLink 44587] and Paul Glen 
[QuickLink 44559] in Readers’ Let- 
ters of March 1. Developing the right 
solution means being involved in 
working intimately with business 
executives. It does not mean decid- 
ing what to implement. That is a de- 
cision for the business side 

In a survey of 78 participants 
conducted during a two-day project 
management boot camp at Comdex 
2003, 49% said that their organi- 
Zation’s strategy wasn't well de- 
fined or broadly communicated 
50% said that their projects 
weren't aligned with the organiza 
tion's strategy, and 57% said that 
the value of their projects to the 
business wasn’t well defined. Why 
do ClOs continue to put resources 


and involvement with the business 
community. To our client ClOs, we 
have always advised practicing “in 
telligent disobedience,” an action 
that's designed to keep both the 
CIO and, more importantly, the cor 
poration out of harm's way. Ana 
we remind our business executive 
Clients of the time-tested warning 
by Warren Buffett: “Never ask the 
barber if you need a haircut.” 
Gopal K. Kapur 

President, Center for Project 
Management, San Ramon, 
Calif. 


Evolving Linux 


HE COMMENTS in the article 

“Users Wary About Open 
Source Alternatives to Windows 
OS” [QuickLink 45042] are all valid 
but if the day ever comes when ro- 

t, low-cost ERP solutions arrive 
on Linux, then the competition will 

egin. That's what small businesses 

build their computer networks 
around, and the rest just follows 
regardless of end-user complaining 


Plains. lronically, this was a playing 
field created and then lost b 
Novell. As long as Linux bu 
enough point-and-click administra 
tion functionality to support th 
do-it-yourselfers, then the 

issues aren't any greater th 

were with Windows just a fev 
years ago 

Bill Pratt 

Vice president of operations, 


Kinamed Inc., Camarillo, Calif 


Stopping Spam 
HE FIRST ITEM in the 
Steps to Take Now 

Link 44797] 

“Winning Ways to Stop S 
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Robert Otto 
ClO and CTO 


The United States Postal Service, 
Washington, D.C. 


Robert Otto started his professional career 

as a clerk. Today he is the ClO and CTO of the 
United States Postal Service”, which processes 
about 55 percent of the world’s daily mail 
volume. Tasked with reengineering the USPS's 
technology infrastructure, he’s led an effort to 
consolidate and centralize disparate systems, 
standardize tools and vendors, upgrade the 
network, and embrace the Web and wireless 
technology. 


Otto and his team have built an advanced 
computing environment that has saved the 
USPS* some $50 million annually. More than 
30 Web-enabled self-service applications help 
employees manage items such as health 
benefits and life insurance, as well as training 
on demand. 


Last year, more than 176 million consumers 
used the usps.com website. The USPS also intro- 
duced a hugely popular desktop service called 
Click-N-Ship*, which allows mailers to create 
their own shipping labels 

‘We have a motto that says IT will not 

stand in the way of what the business ; f ijgeaa) §=— Great Moment at Work: “Seeing the 


needs to do." — Robert Otto Be | ead a positive impact this project has had on the 
employees and customers of the USPS." 


Microsoft Office System salutes those who 
have done great work in the IT field. 


Great Moments at Work. 


Cla 
Microsoft? ta ad. 


Office 


soft Corporation. A ts reserved. Microsoft and the Office logo are either registered trademarks or trade 
»soft Corporation in the United States and/or other countries. The names of actual companies and products 
oned herein may be the trademark of their respective owners 





TECHNOLOGY 


EMERGING TECHNOLOGIES | Q&A FUTURE WATCH 
SANs Come Up to Speed Innovation for Hire Chameleon Computing 


Two new high-speed Fibre Channel Satyam Cherukuri, CEO of Sarnoff Reconfigurable computing architectures are 
standards could provide a migra- | Corp., discusses the meaning of inno- finally beginning to emerge as mobile appli- 
tion path as SANs ascend to vation and how his company has cations begin testing traditional micro- 
10Gbit/sec. speeds. Page 30 turned it into a methodology. Page 32 processor capabilities. Page 34 
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CODE AUTOMATIO 


ISCONSIN is replacing its Lee Carter, a project director 


Early adopters of collection of disparate Wisconsin Workforce Devek 

Model Driven Archi- mainframe- and client Department, says it’s helpful t 
*rver-based unemploy- ness users and IT staffers 

tecture face cultural er ™ 

= ment insurance benefits speak the same lar 

barriers, but the pay- applications with a Web system. But work on requirements. “It allo 

off promises to be instead of starting the project by writ- really focus on our business n¢ 


ing pages of specifications to describe not have to thi 


Savings in time and the business processes, the team ing technology until i 
money as weil as im- drew pictures. about the technology.” 


lhe state’s Department of Workforce To map out requirements 


proved code quality. Development hired a trainer to teach ers and business analysts us¢ 
By Carol Sliwa its Cobol programmers and business ures and lines to illustrate the 


users the Unified Modeling Language use-case scenarios, such as how an in 

and the team mapped out UML dia complete application is processed or 

grams on computers to document the how a rejected applican ) 

requirements for the new applications handled. They replace the stic 
Wisconsin is part of a small but with boxes to sh¢ 

committed group of organizations that systems are connect 

is turning to a set of standards collec of activity, sequence 

tively known as Model Driven Archi- other diagrams 

tecture (MDA) that’s being developed the new applications is 1 

by Needham, Mass.-based Object Man transforms the models 

agement Group Inc. They use UMI the application code 


to desigi 


and code-generating tools to build ap- He says the dia 
plications, and if all goes well, they use 
programming languages only sparingly time. even years down tl 
to fill in the business logic. OMG CEO cause they’re captured ele 
Richard Soley says he knows of two with standards-based tools ft 
companies that are generating 100% of Rational Software div 
their code through the MDA approach make so much more s 
But automatic code generation is pages and pages of nart 
only one of the benefits that early get stuffed into a 3-inch t 
adopters are finding. They say they're nobody ever looks at again,” he says 
also reducing development time and “We can trace from business require 
costs, improving code quality, promot- —_ ments to code, or code back t 
ing code reuse and doing a better job ness requirements 
of meeting application requirements Continued on page 28 
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Continued from page 25 

To ease the transition to MDA, the 
project team brought in a qualified ser- 
vice provider, St. Paul, Minn.-based 
Adaptive Team Collaboration Inc., 
from the OMG’s MDA FastStart pro- 
gram. Chris Armstrong, chief technol- 
ogy officer at ATC, has alternately 
served as mentor, trainer, counselor, 
psychiatrist and, most recently, 
process auditor, Carter says. 

Another critical decision was select- 
ing Dublin-based Curam Software’s 
J2EE-based framework for building ap- 
plications specific to the government 
social-services sector. The business re- 
quirements that the Wisconsin team 
specified through UML and defined 
through a platform-independent model 
(PIM) effectively integrate into the Cu- 
ram software, Carter says. Systems in- 
tegrator Tier Technologies Inc. also 
helped with the work. 

Carter says that so far, the project is 
exceeding expectations. The team com 
pleted project requirements 60 days 
ahead of schedule. The first production 
release of the application is due in No- 
vember, with other pieces to follow 
during the next two years. That’s a 
shorter time frame than for similar 
projects states are undertaking using 
traditional approaches, Carter says 

PFPC Inc. in Wilmington, Del., a 
provider of IT outsourcing services and 
applications for the investment man 
agement industry, says customer proj- 
ects that previously took six months to 
complete are taking four using MDA. 

Michael Harte, the company’s CIO, 
says the MDA approach is instilling 
discipline in his staff, leading to greater 


accuracy. Because the 
process forces more 
work to be produced up- 
front, serious design 
flaws can be discovered 
earlier than they could in 
the past. 

Ian Maung, a senior 
architect at PFPC, notes 
that the MDA approach 
helps developers who 
work in different geo- 
graphic locations to 
communicate better be- 
cause they’re able to un- 


isin 


derstand the interfaces 
their colleagues expect. 
Maung says that in the 
future, MDA might en- 
able easier switches be- 
tween runtime plat- 
forms, since the business 
and application logic is 
defined independently 
of the platform, and the 
PIM could simply be re- 
vised to generate a new 
platform-specific model. He hopes ac- 
tion semantics in UML 2.0 might pave 
the way for 100% code generation to 
standards-based platforms such as 
J2EE, and MDA ultimately may enable 
customized code generation. 
Although the UML/MDA approach 
is gaining increasingly wider adoption 
by application architects, UML usage 
includes no more than 15% of develop- 
ers, according to several analysts’ esti- 
mates. Critics say its complexity can 
be daunting, and the cultural change 
for IT shops accustomed to pounding 
out code can be difficult to negotiate. 


User develops a plat- 
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Analyst Carl Zetie at 
Forrester Research Inc. 
says few development 
teams have the patience 
to go deep into a project 
and not have a line of 
code to show for it. 
“With conventional IT 
shops, there’s always the 
urge to code, and that to 
me is the single biggest 
barrier to any kind of 
modeling,” he says. 

Thomas Murphy, an 
analyst at Meta Group 
Inc., says many develop- 
ers are skeptical based 
on past experiences with 
4GL tools that produced 
code that was hard to 
maintain. He predicts 
that the use of model- 
driven and declarative 
approaches to develop- 
ment will increase — but 
not necessarily with the 
UML/MDA approach, 
which faces many challenges. 

Early adopters are aware of many of 
them. For example, Maung says tools 
that claim to fully support standards 
often don’t. And Per Gyllstrom, chief 
architect at PFPC, notes that some de- 
velopers fear they may be displaced if 
an entire application can be generated 
through models and tools. It’s impor- 
tant, he says, to start with small projects 
to convince skeptics of MDA’s merits. 

Although one of the benefits of 
MDA is code reuse, developers can be 
reluctant to trust a colleague’s code or 
code that has been generated by a tool. 


A Different Model for MICROSOFT 


One prominent tools vendor that has no 
plans to build tools to support UML and 
MDA is Microsoft Corp. 

Prashant Sridharan, a lead product 
manager in Microsoft's tools group, says 
the company is fully behind the generic 
idea of model-driven development. But 
Microsoft believes there's a need for mod- 
els closely tied to the operating system. 

Sridharan says the UML/MDA camp 
promotes the notion “that you can mode} 
once and write your code on a number of 
platforms,” but that’s not effective in prac- 
tice. Microsoft is, therefore, working on a 
modeling engine and modeling framework 
to allow users to describe service-orient- 
ed applications in a Windows-centric en- 
vironment. He says he expects partners to 
deliver UML tools on top of it. 

Whitehorse, the code name for the ser- 


vice-oriented design tool, is due in the first half 
of 2005, with Microsoft's Visual Studio 2005 
development environment. 

One of the key elements of Whitehorse is an 
XML-based domain-specific language to de- 
scribe services or pieces of a network infra- 
structure and how they connect. Microsoft 
plans to publish a software development kit for 
large companies that want to build DSLs. 

“The vaiue is there only if you're going to see 
a massive amount of productivity out of it, be- 
cause it is a massive amount of effort to do it,” 
Sridharan cautions. 

Three designers that Microsoft plans to ship 
with Whitehorse will help users to create dia- 
grams based on the DSLs. A logical infrastruc- 
ture designer allows a user to visually depict, 
with boxes and lines, what each piece of hard- 


! ware in a network can do. A service-oriented 


application designer can be used to describe 


Web services and the protocols to connect 
them. A class designer is for describing 
classes or interfaces and the inheritance 
relationships among them. 

Using Whitehorse, an architect who de- 
signs a service-oriented application will be 
able to validate whether the application will 
work in the network topology that’s de- 
scribed, Sridharan says. 

And the action of dragging and dropping a 
service onto the service-oriented designer 
doesn't merely create a model, it also gener- 
ates code, because the service-oriented de- 
signer is in sync with the class designer and 
the underlying code. Sridharan says users 
shouldn't expect 100% code generation, 
since they will still need to write business 
logic, but they will see progressively more 
code generation over time. 

~ Carol Sliwa 


www.computerworld.com 


Fireman’s Fund Insurance Co. in No- 
vato, Calif., encountered such resistance 


| while undertaking a major project to 
| overhaul its claims system, which went 


into production in 2000. A seven-person 


| team skilled in object-oriented develop- 


ment used a set of UML class models 
from IBM called the Insurance Applica- 
tion Architecture (IAA) to generate 


| code into an Enterprise JavaBeans- 


based framework for persistence, mes- 


| saging, events and object distribution. 


Rational Rose scripts produced over 
80% of the architectural code, and 
Fireman’s Fund later switched to a 
code-generation tool from Montreal- 
based Codagen Technologies Corp. 
Within weeks, Codagen’s rules engine 
and reusable templates eliminated the 
need for Rose scripts to do the trans- 
formation from model to code. 

But the effort stalled as priorities 
shifted, and tension mounted between 
the core architecture team and the de- 
velopers who had to hand-code the 
business logic, says Bill Nadal, an en 
terprise architect at Fireman’s Fund. 

The enterprise architecture team 
picked up the torch again in 2002, when 
it designed a blueprint for a reusable 
component stack with the aid of Peter 
Herzum, an expert in component- 
oriented software manufacturing. The 
team’s goal was a “software factory” ap- 
proach to development, in which com- 
ponents would be reused and snapped 
together like Legos to build applications. 

A proof of concept done with Her- 
zum Software LLC and Codagen target- 
ed IBM’s MQSeries Financial Edition, 
which used the IAA class models and 
Rose scripts to generate services and 
XML-based messages, Nadal says. The 
team demonstrated that, using the 
MDA approach, code could be automat- 
ically generated for persistence classes, 
service interfaces and XML messages. 

Enterprise architects at Fireman’s 
Fund are currently using their compo- 
nent blueprints to build core founda- 
tion models and services for security, 


; context management and metadata 
| management. In the future, they plan 
| to focus on business-level components. 


“Everyone thinks an enterprisewide 
approach takes longer and is more ex- 
pensive,” says Nadal. “It actually means 
you may build a higher-quality compo- 
nent once instead of many times across 
individual projects. MDA is an important 
step in achieving that goal.” @ 45278 


UML 2.0 0N THE WAY 


| Two IBM technologists involved with developing the 


standard discuss its future 
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SANs 


Come Up to Speed 


OUTLOOK: Cost and backward-compatibility issues 
could delay acceptance of 10Gbit Fibre Channel in 
favor of two interim standards. 


TORAGE networking 

equipment vendors 

are preparing a slew 

of new Fibre Chan- 
nel switches and host bus 
adapters that can effectively 
double the speed of current 
storage-area networks (SAN) 
to 4Gbit/sec. Products based 
on the 4Gbit standard, first 
advocated by chip makers last 
year and approved by the Fi- 
bre Channel Industry Associa- 
tion (FCIA) and the American 
National Standards Institute 
last June, are slated FASes 
to roll out this year. 
The technology 
could serve as an 
interim migration 
step to products based on the 
10Gbit/sec. Fibre Channel 
specification approved by the 
FCIA last November. 

But not all users are con 
vinced that more speed is 
better, especially where appli- 
cation servers are the bottle- 
neck. “On the fabric side, it’s 
screaming ... but you’d satu- 
rate your [server] bus long be- 
fore you'd saturate a 1Gbit or 
2Gbit Fibre Channel connec- 
tion,” says Gary Pilafas, senior 
storage and systems 4 


EMERGING 22 
TECHNOLOGIES 


at UAL Loyalty Services Inc., 
an Arlington Heights, IIl.-based 
unit of United Air Lines Inc 

Mike Bennett, a senior net- 
work engineer at Lawrence 
Berkeley National Laboratory 
in Berkeley, Calif., believes 
that new servers being of- 
fered with 64-bit processors 
and faster internal bus de- 
signs will require more than 
the additional bandwidth be- 
ing offered by 4Gbit Fibre 
Channel switches, RAID con- 
trollers and host bus adapters 
a for SANs. 

“Two years out, 
is there going to 
be a market for it? 
I'd say no doubt. 
It’s like garage space: If you 
have it, you'll fill it,” Bennett 
says. 


By that time, however, 4Gbit | 


products will face competition 
from devices based on a faster 
10Gbit standard. In fact, as 
vendors begin volume ship- 
ments of 4Gbit products this 
summer, they'll be introducing 
early 10Gbit products as well. 
Bennett says 10Gbit Ether- 
net will challenge Fibre Chan- 
nel as an alternative storage 
interconnect if Fibre Channel 


Fibre Channel Evolution 
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It’s like garage 
| space: If you 
| have it, you'll fill it. 


MIKE BENNETT, SENIOR NETWORK 
ENGINEER, LAWRENCE BERKELEY 
NATIONAL LABORATORY 


doesn’t keep up, so a leap to 
10Gbit is a must. But 4Gbit de- 

| vices offer critical advantages: 

| Analysts and vendors say the 

| 10Gbit/sec. devices won't be 

| backward compatible with 
current 1Gbit or 2Gbit prod- 
ucts. And they’re expected to 
cost about $5,000 per port — 
five times as much as current 

| 2Gbit devices. 

In contrast, the upcoming 
4Gbit devices are expected to 
cost about $1,000 per port, the 
same as their 2Gbit cousins. 

As a result, analyst Rick 

| Villars at market research 
company IDC in Framingham, 

| Mass., is bullish on the stan- 
dard’s prospects. He predicts 
that 4Gbit products will hit 
the market in the third quar- 
ter but account for just 10% 

| of the market within the first 
12 months. After two years, 
however, he expects that 
number to leap to 90% as 
competitively priced 4Gbit 
products replace slower 

| offerings. 

“They’re going to be the 

| best technology at the lowest 
price,” Villars says. 

| Meanwhile, high prices and 

| backward-compatibility con- 

| cerns will limit the appeal of 
next-generation 10Gbit de- 


vices. “You have to replace 


| anything that the 10Gbit tech- 
| nology touches with all-new 


10Gbit equipment,” says 


| Villars. 


| The Third Option 


Aware of these limitations, 


| vendors came forward with 
| the interim 4Gbit standard. 
| And hedging their bets yet 

| again, SAN equipment ven- 


dors have another interim 
Fibre Channel standard in the 


| offing. Disk drive manufac- 

| turers are rallying around a 
newly proposed 8Gbit speci- 

| fication, and SAN managers 


could see products within 
three years, according to 
manufacturers. 

Skip Jones, chairman of the 
FCIA’s Speed Forum, says the 
organization held its first 
meeting on 8Gbit Fibre Chan- 
nel last month. “If we get out 


| there three years, and you're 


still paying a huge premium 


| for 10Gbit technology and you 
| want that backward compati- 
| bility, that’s where 8Gbit will 

| be attractive,” he says. 


For now, the focus is on 


| 4Gbit products. Several ven- 
| dors, including San Jose-based 
| Hitachi Global Storage Tech- 


nologies Inc., the disk manu- 

facturing arm of Hitachi Data 
Systems Inc. (HDS), have an- 
nounced 4Gbit Fibre Channel 


| offerings (see box at right). 


So where does that leave 
10Gbit Fibre Channel? Despite 


| the cost and compatibility is- 
| sues, vendors see a place for 


the developing standard in 
high-end SANs. Hubert Yoshi- 
da, chief technology officer at 
HDS, says 10Gbit products 


| will serve as an interswitch 


link that can cobble together 


many switches in a SAN fabric 


while using fewer ports. He 
also sees it as a way to create 
many virtual ports over one 
physical switch port. “Through 
the same physical port, we 
can allow up to 128 different 
users,” he says. 

Arun Taneja, an analyst at 
The Taneja Group in Hopkin- 
ton, Mass., predicts that the 
demand for 10Gbit Fibre 
Channel will be enormous, 
both for connecting internal 


disk drives to RAID con- 


trollers and for interswitch 


www.computerworld.com 


Although some vendors are 
preparing 4Gbit Fibre Chan- 
nel devices for release as ear- 
ly as this summer, others are 
more Cautious. 


Hitachi Data Systems lias 
begun joint testing of new 
AGbit/sec. hard drives with 
resellers and expects those 
devices to be available by 
summer. 


Emulex Corp. in Costa Mesa, 
Calif., has announced its em- 
bedded 4Gbit storage switch- 
ing technology and has plans 
for a host bus adapter this 
year and a 10Gbit HBA in 
2005. 


QLogic Corp. in Aliso Viejo, 
Calif., currently offers a 
switch that has two 10Gbit 
ports for interconnections 
between switches. By mid- 
year, it plans to ship 4Gbit 
HBAs and switches that sup- 
port 4Gbit/sec. and 10Gbit/ 
sec. speeds. 


Cisco Systems Inc. hasn't 
yet committed to producing 
4Gbit products, but it has 
announced support for the 
10Gbit standard. It plans to 
make a 10Gbit module avail- 
able on its MDS $000 SAN 
switches sometime this year. 


Brocade Communications 
Systems Inc. in San Jose 
doesn't plan to begin testing 
AGbit and 10Gbit switches 
with storage device manufac- 
turers until 2005. 


links in corporate SANs. 
“There’s no large enterprise 
I know of in the Fortune 300 
or 400 range that doesn’t have 
a massive number of Fibre 
Channel switches at this point 
in time. As they replace those 
switches or directors with 
4Gbit Fibre Channel ports, 


| there’s no question they’ll 


need multiple 10Gbit ports 
to balance that out,” Taneja 


| says. @ 45220 
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, according 
to Satyam Cherukuri, CEO of Sarnoff Corp. His compa- 
ny, which grew out of the former RCA Laboratories in 
Princeton, N.J., aims to help its customers create prod- 
ucts and services that will disrupt the marketplace 
with breakthrough technologies or breakthrough pric- 
ing. Cherukuri discussed the difference between new 
ideas and innovation, the methodology of innovation 
and why hot technologies are not the source of most 
innovation in the marketplace with Computerworld’s 
Tommy Peterson. 


You speak of innovation as a competency you bring to your 
customer companies. Can you explain? There are broadly 
two types of innovation. Let’s get our definitions 
straight — the phrase is used in so many different 
contexts. Businesses innovate and reconstitute them- 
selves by changing their business models. The 
biggest story in the past 10 years in that direction 
was IBM. There is another aspect, which is innova- 
tion through introducing new products. 

Our focus at Sarnoff and our core competency is 
really the creation of and introducing new product 
lines into the market. That’s the context of innova- 
tion I’m talking about. Innovation in that context has 
often been associated with entrepreneurs who either 
through their brilliance or serendipity create new 
ideas, new gizmos, new things, and that’s had, in fact, 
a significant effect on the marketplace. That’s the tra- 
ditional approach to innovation, which is driven by 
the venture-capital models funding entrepreneurs — 
all of that feeding into an ecosystem. 

Innovation at Sarnoff is really a methodology. We 
take the artistic or the “black-magic” aspect out of 
that process, rationalize it and develop methodolo- 
gies around it. It’s not unusual for the instincts of the 
individual to drive any particular domain in the early 
stages of development where all of the forces or fac- 
tors are not understood. As you understand different 
phenomena that contribute to successes or failures, 
then you can develop a methodology around it, 
which is what Sarnoff has done in the past 15 years. 


Is the key to that understanding and innovation being able to 
break it down into steps? Yes. But I want to separate out 
continual evolution of the product line from introduc- 
tion of product lines that create a disruption in the 
market either through performance or cost or both. 
It’s different from a Chevy owner getting the next 
model each year or an RCA or Toshiba introducing 
the next DVD every year. Going from VCR to DVD 
was innovation. Evolving the DVD product line on a 
six-month basis is what I call operating evolution. 

It’s not the idea we’re talking about; it’s not the re- 
search we’re talking about — it’s introducing a dis- 
ruptive performance or cost break into the market 
that causes a disruption in the marketplace. 

There are three factors that are always in interplay, 
and that’s why innovation has for the most part been 
a black art. That term is used by scientists to mean 
you cannot derive it from equations; it is something 


you intuit. When you understand things, it’s not mag- | 


ic. It’s governable; it’s manageable. 


What are the forces that need to be understuod? Innova- 
tion is about bringing technology, business model 
and capital together. Those are essential ingredients, 
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Cherukuri joined Sarnoff 
as a researcher in 1989, 
was named managing di- 
rector of the company’s 
life sciences and systems 
unit in 1998, and became 
Sarnoff’s chief operating 
officer in 2001. He took on the role of pres- 
ident and CEO in 2002. He has authored or 
authored more than al publi- 
cations and is the inventor or co-inventor 
listed on more than 25 U.S. patents. 
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necessary but not sufficient. The reason the venture- 
capital modei is optimized for an 80% failure rate is 
what the VC world knows from experience. Even af- 


| ter they have identified a specific business proposi- 
| tion, because there’s a technology risk, there’s a mar- 


ket risk, and if they’re not dealt with in a timely fash- 
ion, you run out of capital. So how you reconcile 
these in a systematic way is what I’m 
talking about as a competency. 


Are you saying that all our notions of innova- 
tion as coming from a flash of inspiration are 
wrong and that it really comes from knowl- 


visit our Web site: 


| edge and analysis of the process in the past? 





MORE ON INNOVATION 


For more of the Cherukuri interview, 
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When you're just playing with technology, you’re too 
far away from reconciling with the market. You think 
you're succeeding, but in no context. There’s no con- 
text to define what success means. You’ve got to sell 
a product in the market, and that’s really what inno- 


| vation is all about. 


Is there a secret to successful innovation? The key to in- 
novation is having the ability to change the business 
model at a moment’s notice. And the doom of inno- 
vation is the opposite — if you’re reluctant to change 
the business proposition, you're very likely to fail. 

We are always engaged in development projects in 
large corporations and in government institutions, 
and my personal observation is that the single 
biggest reason for their failure is that they’re not 
willing to change the original objective. Because 
when the original objective becomes irrelevant — 
I’m not saying it must become irrelevant, but it often 
becomes irrelevant — the initial teams lock into 
them. They’re afraid to change those objectives in a 
timely manner. That is really what leads to running 
out of capital. You may have the right technology and 
the right business model in the end, but you didn’t 
change them soon enough before you either ran out 
of capital or time. Innovation has to be delivered in a 
timely manner. The window of opportunity and the 
framework of investment are variables, but necessar- 
ily finite variables. 


What technologies do you find the most intriguing right now? 
I hate to look in my crystal ball, but I suppose it’s an 
amusing exercise. There are a couple of institutions — 
I don’t want to name them because I don’t want to of- 
fend them — that put out the top 10 technologies every 
year. I’ve been reading them for the last 30 years. I 
never see them make sensible projections on anything. 
I could talk about how nanotechnology is going to 
be great, but what I’m saying is that innovation is not 
that simple. In the innovation game, that temptation 
needs to be gotten away from. You need to be cog- 
nizant of the fact that at any given time, there are a 
lot of technology forces out there, but never lock in 
on which one is going to be the next hot one. Keep 
your options open until you see strong evidence of 
which way to go. Don’t create a business plan with 


the assumption that nanotechnology is going to be 


the one, because that rarely works. 

There is always a continuing expansion of science 
and technology, and there is always a continuing 
expansion of engineering capabilities. From the be- 
ginning of mankind, that growth has always been ex- 
ponential. But innovation is not about science or 
technology or engineering. Innovation is about rec- 
onciling those with the market to create new prod- 
ucts. So I don’t really care about hot technologies, 
because business opportunities are always there no 
matter what the conditions are, and we help our cus- 
tomer find them. On the other hand, if you have a hot 
technology that gives you a substantial competitive 
advantage, go for it. Sarnoff has, for 
example, the highest power laser ever 
created. It’s still far away from an in- 
novation project, but if we have the 
science harnessed into innovation, 
hey, that’s going to make us a lot of 
money. @ 45297 
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IMAGINE a handheld 
device that combines 
the functionality of a 


WATCH cell phone, a PDA, an 
MP3 player, a digital 


camera, a television and a half-dozen 
other devices. 

Whatever the merits of such a giz- 
mo, for the moment at least, building it 
is still infeasible. The separate micro- 
processor logic needed for each func- 
tion would require far too much real 
estate and energy to fit into anything 
resembling a decent handheld. 

Proponents of a long-held concept 
called reconfigurable computing think 





TECHNOLOGY 


lem at hand,” says John Watson, co- 


| founder of QuickSilver Technologies 
| Pa : : 
Inc., a developer of adaptive computing 


technologies in San Jose. 
Such malleable chips represent a 


| fundamental shift in microprocessor 


design, says Nick Tredennick, a former 


| microprocessor architect and editor of 


the Gilder Technology Report in Great 
Barrington, Mass. 

“All the microprocessors that we 
have today are basically 30- or 40-year- 
old designs,” says Jim Turley, an inde- 


| pendent analyst in Pacific Grove, Calif. 


“We are fundamentally making the 


| same computers our grandfathers did, 


they may have an answer to the problem. | 
proved dramatically.” 


Reconfigurable computing involves 
processor hardware capable of auto- 
matically adapting to changing appli- 
cation needs. Unlike the permanently 
etched circuitry on current-generation 
static microprocessors, 
the wiring on reconfig- 
urable processors can be 
redrawn on the fly by 
software- or hardware- 
based microcontrollers, to 
match the function being 
performed. By opening 
and closing the millions 
of logic gates on such 
chips, their circuitry can 
be changed so as to perform signal 
processing one instant, for example, 
and an encryption function the next. 

Because reconfigurable computing 
chips do away with a lot of the redun- 
dancy and overhead found on static 
processors, they also consume less en- 
ergy while delivering greater speed. 

For instance, a single such chip in a 
cellular handset could configure itself 
to search for a local base station, then 
establish its identity on the cell and fi- 
nally send or receive calls — tasks that 
today require multiple chips. 

“What you are trying to do is to 
change the hardware to match the prob- 


even though silicon technology has im- 


Though it might sound radically new, 
the concept of adaptive computing ar- 


| chitectures has been floating around in 
| one form or another for some time. In- 


DEFINITION 


Reconfigurable 
Computing 


Chips or systems capable 
MeN mull 
while running, to meet dif- 
culate emt oe 


deed, several companies 
— from relatively un- 
heard-of start-ups such 
as QuickSilver and Gate- 
Change Technologies 
Inc. to the likes of Intel 
Corp., Motorola Inc. and 
Infineon Technologies 
AG — have efforts under 
way in the area of recon- 
figurable computing. 
For example, QuickSilver offers an 

integrated circuit technology that dy- 
namically changes at runtime to create 
the hardware needed for different ap- 


plications. Someday, such technology 


could form the basis of a universal cell 


| phone or be used in flexible automo- 


tive electronics components, Watson 


| says. Similarly, Intel’s efforts in this 


area include a project to develop soft- 


| ware-defined radio that uses software 


to automatically reconfigure all the 


| hardware logic on a chip, with no me- 


chanical switching of circuitry. 
The idea is to eventually build a gen- 
eral-purpose wireless communications 





processor 
that’s capable 
of executing 
multiple stan- 
dards and proto- 
cols and offers 
better perfor- 
mance than a dedi- 
cated application-spe- 
cific integrated circuit 
(ASIC), says Steve Paw- 
lowski, an Intel research fellow 
focused on reconfigurable logic. 
Such efforts have gone com- 
mercially unnoticed for a long 
time, but they’re going to be 
crucial in tomorrow’s unteth- 
ered world, Tredennick says. 
Conventional processors were 
designed for systems that were 
largely static and derived their power 
from wall sockets, he says. As a result, 
the focus of most early microprocessor 
design was on price/performance per 
unit — squeezing out ever-faster clock 
deeds from a piece of silicon while 
keeping unit costs reasonably low. 
With the advent of laptops and note- 
books, the focus shifted to microproc- 
essor power levels as well, Tredennick 
says. As more devices start going mo- 
bile, there is going to be an even greater 
focus on price/performance per watt 
of power consumed, he says. 
Fixed-circuit microprocessors are 
quickly reaching certain physical limits 
that will make it extremely hard to 
maintain the power/performance bal- 
ance for much longer, making recon- 
figurable architectures inevitable in 
the untethered world, Tredennick says. 
But getting there isn’t going to be 
easy, everyone agrees. In fact, few ex- 
pect to see widespread use of dynami- 
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cally reconfig- 
urable chips with- 
in five years. 
Pawlowski pre- 
dicts that it will 
take at least until 2007 
for Intel’s software radio ef- 
forts to become commercially viable. 
“We have to first prove internally that 
there is a significant product benefit in 
terms of costs, power and area. Our mo- 
bile power people are expecting longer 
battery life and the flexibility to handle 
multiple protocols,” he says. “We are 
trying to find the perfect fit.” 
Also, technologies such as ASICs 
and field-programmable gate ar- 
rays (FPGA) already offer 
some of the same benefits 
being touted by adaptive 
architectures. ASICs are 
special-purpose chips and 
are more efficient at doing 
specific tasks than general- 
purpose microprocessors. 
FPGAs are devices whose hardware 
logic can be reprogrammed in the field 
to accept hardware updates or bug 
fixes. But neither ASICs nor FPGAs of- 
fer the flexibility that adaptive archi- 
tecture promises. Both technologies 
are also relatively expensive and, in the 
case of FPGAs, too power-hungry. 

Building adaptive chips can also 
be difficult. Writing the programs that 
instruct each of the millions of logic 
gates in such chips to open and close 
so as to alter the circuitry on the fly 
can be incredibly complex. 

The hardware design tools to do 
these sort of tasks are only just emerg- 
ing, Pawlowski says. 

Also, Turley says, “most people 
haven’t really wrapped their heads 
around how to create and manage 


| computers that change on the fly.” Nor 


is there a full understanding of what 


applications might truly benefit from 
the approach, he says. For the moment, 


mobile devices present the biggest op- 
portunity for adaptive computing. 

“Someone is going to have to build a 
very high-volume application for the 
case to be really compelling,” Treden- 
nick says. “Nobody has done anything 
that is really [commercially] success- 
ful” so far. But that could begin chang- 
ing soon, he says. @ 45334 
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Securt 
Search Falls Short 


Tool 


Disk encryption and identity management 
products on display at the RSA Conference 
don’t quite fit. By Mathias Thurman 


RECENTLY attended the 

RSA Conference in San 

Francisco, looking for in- 

formation on encryption 
and identity management 
products. I also attended ses- 
sions on identity management, 
vulnerability assessment, se- 
curity information manage- 
ment and wireless security. All 
were well attended. On the 
show floor, meanwhile, many 
vendors had found a 
way to put a Sar- 
banes-Oxley spin on 
their products. 

Ine of my focus ar- 


device protection, 
particularly disk en- 
cryption. I decided that we 
needed such a product be- 
cause 20 to 30 mobile devices 
go missing from my company 
each year. Most of those are 
laptops, along with a few 
handheld computers and 
BlackBerry e-mail devices. 

A few of the company lap- 
tops that disappeared last year 
were assigned to executives 
and contained sensitive infor- 
mation. In one case, an execu- 
tive responsible for software 
engineering iost a machine 
that contained the design doc- 
uments for a new product line, 
as well as employee contact 
lists, financial reports and 
merger and acquisition infor- 
mation. All the data resided 
within an unencrypted direc- 
tory. In the wrong hands, that 
data could have had a signifi- 
cant negative impact on our 
company. In another case, a 
salesperson reported that a 
laptop containing confidential 
price lists and a locally cached 
customer list had been stolen. 

Now I’m looking for an en- 
cryption product to deploy 


a 


SECURITY 
MANAGER'S 
eas this year is mobile JOURNAL a 


| want to do so, we 
| two-factor authentication to 
| further improve security. 

| However, standardizing on 


first on the machines of these 
“high-risk” employees, as we 


| refer to them, with an eye to- 


ward potentially installing it 


| on the thousands of machines 


in use throughout the compa- 


ny. My initial choice is to use 
| the Encrypted File System fea- 


ture that comes with Win- 


| dows. Since all of our laptops 


use Windows 2000 or XP, both 


| of which include EFS, that ap- 


proach makes a lot 
of sense. 

EFS is fairly easy 
to deploy, allows for 
a key escrow capa- 
bility, includes 
strong encryption 
and can be made 
seamless to the user. If we 
can also add 


EFS leaves out other mobile 
devices. 
Finding a single encryption 


| product that can address all of 
| these devices would be ideal, 

| but I suspect we will need to 

| deploy several different ones. 


Unfortunately, few vendors at 


; the show had products in this 

| area, and I’m not too excited 

| about the products I did see. 

| I'll call in other vendors once I 
| complete my risk analysis. 


We needed [a disk 
encryption] product 
because 20 to 30 
mobile devices go 
missing from my 
company each year. 


| written using a standard plat- 
| form such as J2EE, authentica- 


| nightmare. 
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| Identity Crisis 
| Ialso spent some time with 
identity management product 
vendors. Compliance with 
regulations like Sarbanes-Ox- | 
ley is a big issue for my com- 
pany. Identity management 
tools address the need by con- 
trolling access to our many 
homegrown applications. 

About 80% of the applica- 
tions we run are developed in- 
house. Although many are 


tion, authorization and access 
| isn’t standardized. Instead, 

each application is aseparate | 
entity with its own database of | 
users, creating a management 


Some applications support 
the financial aspect of our 
| business, which is where Sar- 
| banes-Oxley comes in. Identi- 
ty management tools could 
provide a single point of user 
and password management, 
| provisioning, access control 
and authentication for all of 
our applications. 

One control that we might 
be asked to test is the ability 
to quickly remove a user’s ac- 
cess to specific financial appli- 
| cations. Currently, this process 
| requires access to many appli- 
cations to ensure that the 
user’s account is disabled. 
With an identity management 
system, it would be a one-step 
process. 

The promise of these tools 
is that an individual’s identity 
and access rights can be de- 
fined and managed from a sin- 
gle point. The vendor market- 
ing made this all sound fairly 
straightforward, but as I began 
peeling the veneer off the 
products, there was a familiar 
tone to it all. 

The state of identity man- 
agement reminds me of when 
we first started looking at 
public-key infrastructure 
(PKI) about 18 months ago. 








| everything. Interoperability, 


| at the time, so we put it on the 


| WS-Federation was developed 


| VeriSign Inc., BEA Systems Inc. 


| suming for us. I’m meeting 


Vendors and integrators gen- 
erated a lot of excitement and 
made many promises, but 
when they got down to the de- 
tails, we found that we could 
enable only certain aspects of 
our business for PKI, not 


resources and cost became is- 
sues. It just didn’t make sense 


back burner and eventually 
lost funding for it. 

Another potential benefit of 
identity management is the 
ability to share aspects of a 
user’s identity between enti- 
ties, whether they are within 
the confines of the corporation 
or between organizations. But 
this means I must trust the oth- 
er company with my employee 
identity information. Vendors | 
call such sharing of identity el- 
ements “federated identity 
management,” but they sup- 
port two competing standards 
in this area: Web Services Fed- 
eration and Liberty Alliance. 


by a group of companies that 
includes Microsoft Corp., IBM, 


and RSA Security Inc. The Lib- 
erty Alliance is more of an 
open-source community proj- 
ect. At this point, I’ve decided 
to wait for a clear standard to 
emerge and for the inevitable 
vendor shakeout. 

Back at the office, the most 
pressing issue is establishing 
security standards. Setting ap- 
plication security standards 
seems to be very time-con- 


with development team man- 
agers to ensure that what we 
come up with makes sense and 
is attainable. I should be done 
in the next few weeks. Then I 
can turn to other issues on the 
project list: patch management, 
wireless security, vulnerability 
assessment scanning, personal 
firewalls and security informa- 
tion management. B 


WHAT DO YOU THINK? 


This week's journal is written by a real securi- 
ty manager, “Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 
thurman@yahoo.com, or join the discussion 
in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 





@ computerworld.com/secjournal 


www.computerworld.com 
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Recommended 
Reading 
Anyone who wants to know 


more about federated identity 
management should read the 


You'll find the PDF at Quick- 
Link 24150. 
~- Mathias Thurman 


Exploits Target 
Confidential Data 


software vendor says. The re- 
port, which includes a list of 
the top 10 threats, is posted at 


NetScreen 
Updates IDS 
NetScreen Technologies Inc. 
in Sunnyvale, Calif., has an- 
nounced a new version of 
intrusion-detection and -pre- 
vention software for its Net- 
Screen-IDP line of hardware. 
IDP 3.0 includes features for 
analyzing network and appii- 
cation traffic, thwarting Inter- 
net worm outbreaks and spot- 
ting rogue applications. The 
software, which ships in early 
April, will run on the full line of 
NetScreen-IDP products. 
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These days, no network is free of threats. That’s why you have to assign network security privileges to everyone. Employees, customers, 
and partners. You need to set an acceptable use policy that dictates what each of them can and can’t access. Until now, you had to do 
this manually. 
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Not anymore. Now you can do what Baylor University did. Implement an Enterasys Secure Networks™ solution with a unique, policy- 
based system that empowers the network to allocate resources based on specific users and their roles. The network “sees” who the user 


is and assigns privileges accordingly. This improved control also gives you more security. 


It’s all about giving you a smarter way to network with central, intuitive management. Find out more at networksthatknow.com/Baylor. 
Or ask any one of the many enterprise customers we’ve worked with for years. 
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NetlQ Launches 
AppManager Beta 


NetIQ Corp. in San Jose has an- 
nounced a beta version of Net 
AppManager 6.0, which is de- 
signed to enable IT groups to 
manage service delivery to inter- 
nal users in networks and sys- 
tems. It is also able to measure 
compliance with service-level 
agreements. The beta version of 
Net AppManager 6.0 is available 
now; the product will be generally 
available before July. It is priced 
at $2,500. 


Red Earth Boosts 
Policy Patrol 


Red Earth Software LLC in 
Portsmouth, N.H., announced 
Policy Patrol Version 3.0, a set of 
software products for e-mail fil- 
tering. New features include im- 
proved spam protection through 
Bayesian filtering, remote image 
detection and word-pattern 
matching. Policy Patrol Enterprise 
includes content checking and at- 
tachment blocking. Pricing ranges 
from $95 to $395 per 10 users. 


IBM to Sell Opteron 
Workstation 


IBM in May will sell the Intelli- 
Station A Pro, an Opteron-based 
workstation, with pricing starting 
at $2,619. IBM will load Red Hat 
Enterprise Workstation 3.0, which 
will support 32- and 64-bit appli- 
cations, on the workstation if 
needed. It will also support SUSE 
Linux and Microsoft Windows. 


Veritas Upgrades 
Storage Software 


Veritas Software Corp. in Moun- 
tain View, Calif., announced it has 
upgraded its Cluster Server and 
Volume Replicator storage soft- 
ware products, integrating them 
as a disaster recovery suite. Both 
offer the ability to fail over appli- 
cations and replicate data over an 
IP network. Cluster Server 4.0 
starts at $2,995, and Volume 
Replicator starts at $4,495. 


TOMMY PETERSON 


TT Must 
Respect Anew 


HE CEO OF A software company told me 
recently that the “defensiveness” of IT 
organizations is one of the most pervasive 
problems in the industry these days. It un- 
dermines their standing within their com- 
panies and reduces their influence in decision-making. 


He asked me not to at- 
tribute the comment to him 
because “the last thing 
those people want to hear 
is some vendor suggesting 
they’ve got a bad attitude.” 

That CEO is not alone in 
noting that something has 
gone sour in IT’s relation- 
ship with both the business 
side and users. The barely 
veiled hostility between IT 
groups and the folks who 
sit on mahogany row and in 
the cube clusters has become a com- 
mon topic of conversation. 

There are good reasons for IT work- 
ers to be edgy. Those whose jobs 
haven’t been eliminated or sent over- 
seas are working harder with smaller 
budgets — and they’re getting a lot 
less respect for the work they do. It’s 
the respect factor that may be the crux 
of the issue. 

Several years ago, I worked in the 
headquarters of a large newspaper 
chain. The IT staff had convinced 
management that physical security for 
the computer room was crucial, and 
they had sequestered themselves away 
in a windowless corner office, barri 
caded by a reinforced door with a 
combination lock. 

They ventured out of their fortress 
only to chastise us users about cyber- 
hygiene and to restart applications 
that had been fouled by stupid-user 
tricks. We viewed them as eccentric, 
and they irritated us with their arro- 


TOMMY PETERSON is 
Computerworld’s Tech- 
nology-editor. Contact 
her at tommy_peterson@ 

computerworld.com. 


more times than we liked 

to admit. 

At one point, upper 
management began hud- 
dling with the in-house 
geeks and a gaggle of con- 
sultants, trying to choose a 
new “front-end” system — 
although we doubted the 
execs actually knew the 

- difference between a front 
end and back end. 

Management even hired 
a vice president charged 

with developing our online operation. 
It seemed that the geeks were going 
to rescue our content from legacy 
media, too. 

But it didn’t quite work out that 
way. The vice president lost his job in 
a round of downsizing. The fortress 
was dismantled when half the build- 
ing was leased to another company. 


| The IT staff now runs itself ragged 


gance. But they knew things we didn’t, | 


and in truth, they saved our butts 


maintaining the operation and 
searching out troublesome rogue ap- 
plications that have been installed by 
users who have become too smart for 
their own good. 

In that business, as in many others, 


IT has been demystified both by a sim- | 
ple process of increasing user familiar- | 


ity and by design, as complex technol- 
ogy has been pushed down through 
organizations. The IT department is 
no longer populated by the keepers of 
arcane technical secrets; it’s a support 
service. 

At the upper-management level, 
technology is no longer an adventure 


| — CIOs had better be able to prove 


that the IT strategy lines up with the 

| greater business strategy of the com- 
pany, or they won't be around very 
long. 

This is a natural progression as the 
industry matures, but that doesn’t 
make it any easier to swallow for the 
people whose status has declined as 

| the uncertainties of their jobs have 
| escalated. 

In many cases, IT’s response is, well, 
defensiveness. When I returned to the 

| newsroom the day I spoke to that 

| CEO, I checked the Computerworld 
Web site for coverage of our Premier 
100 conference. There I found a de- 
scription of the verbal sparring be- 
tween Bob Metcalfe, father of Ethernet 
and defender of the IT faith, and 
Nicholas Carr, author of the infamous 
“IT Doesn’t Matter” article that ap- 
peared in the Harvard Business Review 
last May. Metcalfe’s spirited and witty 
defense of the industry [QuickLink 

| 45332] was no surprise, nor was Carr’s 
slightly peevish but exceedingly lucid 
defense of his contention that IT can 
no longer offer companies a competi- 
tive advantage. 

The surprise came in the intensity 
of emotion demonstrated by the IT 
executives in the audience. They kept 
the debate going with comments and 
questions half an hour over its allotted 
time, and many in the crowd were 

| clearly very angry at Carr. Despite the 
provocative title of his article, Carr 
acknowledges that IT is absolutely 
essential to modern business — it’s 
just not going to drive the business 
models of non-high-tech companies. 
IT is used to leading the parade. Yet 
it will earn back the respect it has lost 
only by making the adjustments need- 
| ed to march in step with the rest of the 


band. @ 45517 
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Play War! Career Watch OPINION 
War games can make strategic plan- ( Vince Campitelli describes the The Case for IT Leasing 
ning come to life. Companies can work of IT auditors at Wachovia Are you sure you want to pur 
simulate business moves — such as a, ‘ ‘ Corp. and gives career advice for puter? Norbert Kubilus says today’s flexib 
strategic IT investments — as well as \ IT professionals considering a deals can be a very 


competitors’ countermoves. Page 42 | ) move into IT auditing. Page 44 some IT risks to the 





O A CIO, OUTSO ING contracts may lOOK lk 
other procurement and service agree 
they’re much riskier. “You're writi 
for a service that’s impossible to descr 
will change over time and need to be re 
ed, that will make you dependent on the service provider 
and for which termination is not an option,” says Paul Roy, a 
partner at Mayer, Brown, Rowe & Maw LLP in Chicago, who 
has put together some of the largest outsourcing ls in his- 
tory. “That’s not an ideal negotiating position,” he 
Roy and other attorneys who specialize in outsou 
have seen the challenges CIOs face when they sit de 
negotiate outsourcing deals. Here’s some advice on 


that can undo the unwary: 


PROBLEM: Unresolved issues. Amid th 
the deal done, the outsourcer may pus! 
pricing or service levels iled 

nor adjustments later. “T 

dard; we do this all the time, ” 

the outsourcing practice at 

ton. “But in our experience 

a bad result.” 

“It’s much better to resolve those things 
beforehand, even if it means delaying the signing,” 
Zahler says. It takes many months to put together an out 
sourcing deal, he adds, so if you know you 
cient data to establish service levels or prici 


ing immediately. 


Hidden traps lurkin every 
outsourcing contract. Here 
are 12 BIG ONES -— and how 
you can avoid them. 


otc 
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PROBLEM: Fixed service levels and incentives 
can become antiquated over time. 

Design the agreement to be flexi- 
ble so you can add and remove service levels 
and set incentives so you can move from one service 
level to another, says Roy. Include a mechanism that 
allows you to ratchet up service levels to keep pace 
with the market, focus on things that create business 
value and adapt over time. 

PROBLEM: Fuzzy scope. The standard contract 
has voluminous descriptions of scope of service 
often in excess of 100 pages, Zahler says — but 
they’re written by technical people who aren't as 
precise and detailed as they should be. “And clients 
don’t read them,” he adds. 

Zahler’s firm breaks IT into 77 de- 
tailed processes based on industry standards 
and creates a matrix with processes down the left 
side and the client’s description of his IT group 
across the top. Then they color-code supplier and 
customer responsibilities. “It’s easier to do a contract 
that way and it gets clients to focus on scope of ser- 
vice,” he says 
PROBLEM: Tasks missing from scope. No 
matter how careful you are with the scope of work, 
you'll miss something, and that can cost you more, 
Roy says. 

Build in a “dragnet” clause that 
states the following: 

The outsourcer will do everything your staff did 
over the preceding 12 months, even if you neglect to 
list it. 

The outsourcer commits to perform the function 
as it’s performed in the market, recognizing that 
things will change over time. 


PROBLEM: Exclusivity. In order to get economies 
of scale, critical mass and broad integration, the out- 
sourcer will want the exclusive right to perform the 
functions in the contract. “But think very carefully 
about this,” Roy says. “Not all suppliers have equal 
capability in all functions. This is one of the biggest 
problems we see.” 

Retain the right to perform the 
function in-house or send it to a third party, 
Roy says. This right allows you to maintain competi- 
tive pressure on the outsourcer and test service lev- 
els in categories where there may be problems. If 
the outsourcer is weak in one function or region, you 
can take back that piece or give it to someone else. 
“Where you have multiple outsourcing agreements, 
over time you may find that what you’ve outsourced 
to one supplier really fits better with another,” Roy 
says. “This enables you to reorganize the matrix of 
outsourcing functions.” 
PROBLEM: Damages waivers. The outsourcer 
wants to cap reimbursements for direct damages — 
out-of-pocket expenses you pay because of its fail- 
and completely waive indirect or consequen- 
tial damages, such as lost profits or a decline in stock 
price, as a result of such failures. “That means if you 
outsource the call center and the vendor messes up 
and you lose $10 million in profits, if it didn’t ‘cost’ 
you anything, you would have essentially no re- 


ures 
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WATCH 


IN THE “HOT FLUSH OF ROMANCE,” 
both parties want to get the deal done and see the 
benefits as soon as possible, says Gregg Kirchhoe- 
fer, a partner at Kirkland & Ellis. “It's hard to think 
of the negotiation process as anything other than a 
hindrance,” he says. But try to view it as an oppor- 
tunity to identify problems, deal with those issues 
and lay the foundation upon which the relationship 
can grow and prosper in the long term 

There's a certain adversarial element to any 
contract negotiation, but don’t get so tied up on 
gaining the upper hand that you blow the long-term 
benefits for short-term advantage. “Be careful 
what you ask for, because you just might get it.” 
Kirchhoefer says. An outsourcing arrangement is 
like a three-legged stool: scope of services, perfor- 
mance and price, he explains. “If you lengthen or 
shorten one, the rest gets out of balance,” he says. 

Realize that both parties have legitimate inter- 
ests, and fashion a contract to build and foster the 
relationship, he says. “Otherwise, you may win the 
negotiation but create a dynamic that's a disser- 
vice to what you're trying to accomplish, a breach 
waiting to happen.” 

- Kathleen Melymuka 


course,” says Brad Peterson, a partner in the out- 
sourcing practice at Mayer Brown. “It is one of the 
most dangerous provisions.” 

This is difficult to work around, 
Peterson says, but three tactics may help: 

Try to negotiate the cap on direct damages as high 
as possible. The outsourcer will want to limit it to 
one to three months’ revenue; try for 12 to 24 months. 
“Get the number high enough to provide a meaning- 
ful remedy,” Peterson says. 

If you must waive indirect damages, demand as 
many exclusions as you can. For example, retain the 
right to indirect damages if the outsourcer fails to 
provide termination assistance or if your company is 
sued for intellectual property infringement based on 
software the outsourcer is using. 

Make sure the contract defines specific amounts 
the outsourcer will pay if it fails to perform. 
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in complex outsourcing deals because it’s very 
difficult to find comparable situations at other 
companies. 

Benchmark the prices of individual 


| components and regions, Roy suggests. For exam- 


ple: How much are you paying for application pro- 
grammers in India compared with the competition? 
Keep in mind that this type of benchmarking re- 
quires the outsourcer to charge a straightforward 
amount for each component. That means no cross- 
subsidizing (subsidizing an expensive element in 
the contract — say, mainframe maintenance — by 
raising profits on another element, such as applica- 
tions development). 
PROBLEM: Lock-in. For business reasons, you 
may need to terminate the outsourcing contract for 
convenience — that is, without a failure or breach 
from the outsourcer. But the fee can be prohibitive. 
Outsourcers try to set a termina- 
tion-for-convenience fee as high as possible 
to lock you in, says Peterson, but be sure it’s low 
enough that termination remains an option. 
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PROBLEM: Ownership of intellectual property 


| developed in the course of outsourcing is al- 


ways in contention. You want to own what you've 
paid for. The outsourcer wants to own what it has 
developed 

Focus on whether the application 


is strategic to your business, says Gregg Kirch- 


| 
| 
| supplier and customer, but you have to cede control 
| of personnel. 
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PROBLEM: Decreasing costs. Technology costs 
— especially in areas like telecommunications — can 
decline dramatically over time, but an outsourcing 
contract can span five to 10 years. How do you avoid 
overpaying? 

Write short-term contracts for the 
most volatile pieces, or allow the outsourcer to 
provide the service on the condition that it passes 
through to you any cost reductions from its supplier 
on a dollar-for-dollar basis. (You can require the out- 
sourcer to disclose its costs or certify when it has 
renegotiated.) “The supplier keeps the margin, but 
they don’t get a windfall, and this allows you to get 
into a longer-term contract,” Roy says. 
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PROBLEM: Benchmarking can be ineffective 





hoefer, a partner at Kirkland & Ellis LLP in Chicago. 
If an application isn’t strategic, let it go, but you may 
want to negotiate some return on that investment in 
terms of royalties or other compensation. 
PROBLEM: The outsourcer’s people are criti- 
cal because of the close interaction between 


Retain the right to approve six to 
12 people in certain key positions who solve 
problems and interface with management, such as 
project executives, help desk managers, systems ar- 
chitects and software troubleshooters, Roy says. Get 
commitments that those people will stay on for a 
reasonable minimum time and, when they do leave, 
that you'll interview and approve their replacements. 
Retain the right to request reassignment of people 
who don’t work out and to hire the outsourcer’s staff 
at the end of the deal. 
PROBLEM: Ignoring termination issues. In 
the eagerness to get the deal done, people often 
pay insufficient attention to termination, causing 
trouble later. 

Focus on what should happen un- 


| der various circumstances: termination at the 
| end of the contract, termination for cause or termi- 


nation for convenience. Carefully consider the rights 
and responsibilities of each party in each circum- 
stance, and be sure the contract reflects that, says 
Kirchhoefer. 

“When [termination] happens, the parties won’t be 
talking as much and won’t be as interested in helping 
each other out,” he notes, “so you want to have clear- 


cut rules.” @ 45017 





TS ea 


lime is money. So it’s important to get new business software up and running quickly. Which is why SAP’ solutions built on 
SAP NetWeaver’ plattorm make so much sense. Because they're designed with fast implementation in mind, you can see business resu 


Visit sap.com/speed or call 800 880 1727 to see how fast SAP can make things happen for your company 





42 COMPUTERWORLD March 22, 2004 


HEY DI UNDERSTAND 
the threat until it was too 
late. 
tacks came, 
phistication and growing in 
the damage they did to the 

U.S. economy and to certain targeted 

industries in particular. Just when the 


DN’T 


For years, the cyberat- 


increz asing in so- 


nation was awakening to the nature of 
the threat — thanks to a defector from 
the enemy side — the enemy country 
switched to bioattacks. Like the cyber- 
attacks, these were hard to pin down. 
(That outbreak of mad cow disease 
was an accident, wasn’t it?) 

So clever were the attacks that in 
most cases, U.S. officials didn’t know 
just where they were coming from. As 
a result, their foreign policy toward the 
originating country was wholly inap- 
propriate 
weapons to defend against a military 
threat, when in fact the opposing coun- 
try was hellbent on economic warfare. 

Fortunately for the U.S., this isn’t a 
true story. It’s a brief summary of a two- 


They spent billions on 


day war game that played out recently 
in Newport, R.I. Put on by the military 
strategy experts at Alidade Inc., the 
game pitted a Blue Team (the U.S) 
against a Red Team (an Asian country, 
perhaps China). The players were 
mostly military types hoping to hone 
their strategy skills, but some players, 
including this reporter, were there to 
see how war-game concepts might be 
applied in the commercial world. 

The teams began by deciding how to 
spend their military budgets — $300 


MANAGEMENT 


PLAY 
WAR! 


Strategic planning comes to life when war 


games are used to simulate business moves - 


such as IT investments - and countermoves. 
BY GARY H. ANTHES 


billion for Blue, $30 billion for Red — 
and over the course of five moves, 
each one covering a period of five | 
years, Blue and Red took turns acting 
and reacting with various military and 
foreign-policy actions. For example, 
when Blue and Orange — Orange is a 
country in Red’s region with close eco- 
nomic ties to Red — agreed to a joint 
military exercise, Red saw it for what it 


| 
| 
| 
| 


Cot "LECTING. 

BARGAINING 

BY DEVELOPING 
WORLD 


ABISES 


| 
Jj 
Move 2 Reps 


In Move 2, Red considers and takes a number 
of options aimed at giving the appearance of 


cooperation with Blue while overtly and 
Pg Nm mri rN 


was: a naked attempt by Blue to exer- 
cise influence in Red’s back yard. 

The Red Team, meeting in a hotel 
conference room next to Blue, consid- 
ered six responses, including doing its 
own military exercises with Orange, 
funding massive high-tech economic 
development in Orange and threaten- 
ing nuclear proliferation in the region. 

Red ended up making only token 


eWest secuerry- 
SumMMat 
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moves in any of those directions. In- 
stead, it focused on beefing up its cy- 
berwar capabilities, both offensive and 
defensive, while making various cos- 
metic overtures to Blue, such as pro- 
posing to establish joint projects in 
biotechnology, ecology and IT. 

Red Team Commander Scott Borg, a 
senior research fellow at the Institute 
for Security Technology Studies at 
Dartmouth College, describes Red’s 
winning strategy this way: “We knew 
Blue wouldn’t attack us, and we knew 
we couldn’t win any military conflict 
with them. So we made it an economic 
war.” 
of Red’s ideas, he nevertheless learned 
something new from them. “It will 
keep me awake at night,” “It’s 
made me realize all the things a Red 
Team really can do.” 


Although Borg conceived of most 


he says. 


| Mismatched Moves 

| Jeffery Cares, president of Alidade and 
a self-styled “military innovation ex- 
pert and naval futurist,” 
war games often misread each other 
and respond inappropriately. “Often 
Blue plays A/counter A, while Red 
plays D/counter D.” That’s what hap- 
pened in this game. 

And that’s what often happens in the 
corporate world, where companies with 
entrenched strategies — reinforced by 
success — fail to anticipate out-of-the- 
box competitive moves. For example, 
IBM in the 1970s failed to foresee com- 
petition for the mainframe. 

War games can be a uniquely effec- 
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iter. 
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In Move 3, Blue still has trouble understanding acne arnt] alg 
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tive way for corporations to do long- 
range planning for investments, in- 
cluding IT investments, says Paul A. 
Strassmann, a lecturer in national se- 
curity studies at Syracuse University 
and a Computerworld columnist. “I am 
a strong believer that war-gaming will 
displace much of what these days is 
called corporate strategic planning,” he 
says. Strassmann is a former CIO at 
several Fortune 50 companies and a 
former member of the Pen- 
tagon’s war-gaming simula- 
tion review board. 

The time has passed when 
IT can justify its budget 
solely on the basis of its 
contribution to the efficien- 
cy of the corporation, 
Strassmann says. It must 
now work at a more strate- 
gic level. “Global competi- 
tion is now conducted in 
terms of commercial infor- 
mation warfare, and IT is a 
weapon of choice,” he says. 
“So competitive planning in 
the commercial sector really 
becomes war-gaming. Then 
the question is, Will the CIO get a seat 
at the table when the game is played?” 

Virtually all companies do long- 
range planning. But doing “what if” 
speculations with co-managers around 
the boardroom table doesn’t produce 
the kinds of insights and discoveries 
that players say can come out of a for- 
mal war game. “The worst thing that 
can happen in strategic planning is that 
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the boilerplate plan from last year is 
dusted off, the blanks are filled in, it’s 
distributed, and people immediately 
file it on the shelf next to last year’s 
plan,” says D. Scott Frondorf, president 
of Nextscale Inc. in Cincinnati and a 
member of the Blue Team in Newport. 
“You have to do something that brings 
the strategic plan to life,” Frondorf says. 
“You have to give it character and a 
space in which to operate. Something 
like a war game does exactly 


for the boilerplate plan.” 

Testing the boilerplate is 
just what a major manufac- 
turer did in a recent war 
game, Strassmann says. The 
game pitted a Red Team, 
consisting of managers who 
had put together a tradition- 
al five-year plan, against a 
Blue Team of lower-level 
line managers responsible 
for making the plan happen. 
Perversely, this arrangement 
forced those who had devel- 
oped the plan to attack the 
company trying to live by it 
“The result was counterintuitive” for 
the participants, says Strassmann, who 
moderated the game. “At the end of the 
game, everybody said, ‘Hell, we didn’t 
know this.’” 

“The top management that prepared 
the plan had never walked the shoes of 
the other guy,” Strassmann says. “Now 
that they had Red shoes on, they saw 
the vulnerabilities of the Blues and 


that. In fact, it could be a test | 


“We did some hoopla,” says for- 
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“A war game is really a psycho- 
logical thing, a dramatic exer- 
cise,” Strassmann says. “People 
get very upset.” 


they said, ‘We are just going to take 
them to the cleaners.’ ” 

The game helped the company real- 
ize it had an ace in the deck all the 
time, Strassmann says. “The ace was 
one of many projects pursued on an 
exploratory basis in advance engineer- 
ing. The game moved the project high 
on the list of priorities and accelerated 
deployment. This turned out to be a 
great success in gaining market share.” 

This particular game focused on 
product development and marketing 
and not directly on IT issues, but the 
CIO did participate, Strassmann says. 
“The CIO gained enormous under 
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By Move 4, the Blue Team senses that it isn’t in control of the game and is 
confused as to what Red is up to. Blue now sees the struggle as mostly an 
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standing of the marketing issues, and I 
understand he subsequently reallocat- 
ed some of his priorities,” he says. 

Jack Reader, a senior business devel 
opment manager at Cisco Systems Inc., 
attended the Alidade war game and 
says the concept could be applied in- 
ternally for long-range planning. “But 
no one here has bought into it yet,” he 
says. “These out-of-the box things take 
a while to find the right sponsorship at 
a big company like Cisco.” 

Reader says war games are well suit- 
ed to corporations faced with making 
expensive and complicated long-term 
technology choices. For example, he 
says, a CIO at a small bank might adopt 
the role of a Red Team against a larger 
competitor’s Blue Team or, if the CIO 
works for a dominant bank, it could 
play the role of Blue against smaller 
competitors playing Red. 

“What would you do if your CFO 
came down the hall and told you your 
IT budget had been cut 80%?” Reader 
says. “As it turns out, there are some 
pretty decent strategies when you are 
the small guy. It’s less brute force; it’s 
about being smarter.” 

Alidade likens its war games to 
“exploring the landscape.” Now, having 
played the game, Frondorf agrees. “A 


war game forces you to think through 
the scenario and create what I call 
‘trail heads,’ places that mark pathways 
to explore,” he says. “I like to say that 
everything interesting happens at the 
boundaries. In IT, that’s especially 


true.” 45012 
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Think Small 
Full-time job growth continues to disappoint 
economists, financial analysts and, most of 
all, job seekers. But that's not to say there 
isn't any IT contracting work out there, says 
Michael Alter, president of SurePayroll Inc. 
a Skokie, lli.-based payroll outsourcing 
company. 
SurePayroll’s client base comprises 
11,000 small companies, which Alter says 
are hiring IT contractors at a greater rate 
than ever before. For the 2003 tax year, the 
number of Form 1099 wage statements - 
the ones issued to freelance and contract 
workers ~ rose 12% among SurePayroll’s 


client companies. “A lot of this contracting 
is for iT,” Alter says. “Small businesses are 
realizing they can get access to a tremen- 
dous number of highly qualified people with 
specialized skills who have been laid off by 
large companies. On average, small com- 
panies can and will hire 10 programmers to 
do 10 specialized projects, rather than a 
single $100,000-a-year programmer.” 

For the month of February, the latest 
riod for which statistics are available, U.S. 
payrolls outside of the farm sector grew by 
just 21,000 jobs and the unemployment 
rate held steady at 5.6%. In January, 
97,000 jobs were added to the economy. 

~ Julia King 


Double Vision 


Business and IT executives don’t see eye to eye 
on where their problems lie. 


Which IT skill sets are lacking in your 
IT organization to the point where it 
threatens success in 2004? 


BSE me is Ghulolg 
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Project management 


Leadership/change 
management skills 


Strategic thinking 


Analytical thinking Contractors and 


consultants: 7% 


Base 


Don’t know: 7% a 
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32% 


Vince Campitelli 
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Company: Wachovia 
Corp., Charlotte, N.C. 


What he does: Leads 

a 60-person audit 

team focused on 

identifying and man- 
ERE cee orm URC Re) 
IT at the $2.4 billion bank, the fourth- 
largest in the country. In banking and 
financial services, 70% to 80% of all 
Pa oM CU cr cu merce EM 
Re aT MR Um Ts soem OUT CLL) 
believes the need for IT risk auditors is 
growing in other industries as well, as 
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regulations, such as the Sarbanes- 
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What does an IT risk auditor do exactly? It 
entails looking at everything in the technology in- 


frastructure - networks, operating systems, pro- 


gram change controls, disaster recovery, informa- 
tion security, LANs, WANs and voice networks. 
You assess the risks of all of these technologies 
and the way they are being managed. Then you 
develop a three-year audit plan under which you'll 


+ look at every component in the architecture, look- 


ing at the high-risk technologies every year and 
the medium-risk items every other year or third 


How will you make up for your 
shortfalls of IT skill sets in 2004? 


— Won't fill the gaps: 3% 


Combination of 

internal training 

FUtmee i cr-Catile 
52% 


year. It's like sampling New York City restaurants. { 
You never get finished because by the end of the 
first year, you have changed the infrastructure so 
much that you have to sample more things. 


What kind of skills do you look for in an IT 
auditor? These are hard-core technology people. 
They understand Unix, firewalls, networks and 
operating systems, and they understand them 
from a risk and control perspective. They don't 
need to be Java programmers, but they need to 
understand how to control Java programs and 
best practices for developing, inventorying, test- 
ing and rolling out changes 


What's your career advice for an IT profes- 
sional looking to move into IT auditing? The 
No. 1 quality you need is professional skepticism. 
You believe everybody and trust no one. It's also 
all about communication. IT auditors are focusing 
on new products, new services and new projects 
They need to make sure the CIO understands the 
risk and has a good way of managing it. In my 
opinion, risk and understanding risk is a major 
black hole. What's needed is a good dialogue be- } 
tween business management, financial manage- 
ment, IT personnel and IT auditors. You have to 
come up with a common language that all people 
understand 


How do you do that? Have a good training cur- 
riculum for IT people. For new IT hires, we build in 
an appreciation for risk and risk assessment con- 
trols into the core training. The other thing we do 

is get senior people to fully support it. That then 
significantly reduces the challenge because brand- 
new people are all for it. €2 45276 - Julia King ! 
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Retailing ClO Now 
CTO at Newgistics 


Austin-based Newgistics Inc., 
which helps direct retailers han- 
dle returned merchandise, last 
week named Joe Phillips as chief 
technology officer, reporting to 
the CEO. Phillips previously held 
CIO positions at Blockbuster Inc., | 
Eckerd Corp. and Rite Aid Corp. 
He hoids a bachelor’s degree in 
math and physical science from 
Troy State University. 


Unova Taps Taylor 
For IT, HR Roles 


Unova Inc., a mobile and wireless 
systems company in Everett, 
Wash., last week named Sue Tay- | 
lor as CIO and vice president of 
human resources. Taylor previ- 
ously served in those dual roles at | 
Intermec Technologies Corp., 
which is Unova’s automated data 
systems division. Her previous 
positions at Intermec included IT 
director of global systems, direc- 
tor of global telecommunication 
and client services, and leader of 
the company’s custom software 
development. Taylor holds a mas- 
ter’s degree in business adminis- 
tration from the University of 
lowa and a bachelor’s degree in 
business administration. 





Trash Hauler 
Names New CIO 


Waste Management Inc. in Hous- 
ton recently named Lynn M. Cad- 
dell as senior vice president and 
ClO. Caddell will succeed the 
company’s former ClO, Tom 

Smith, who retired March 8. Cad- 
dell will lead a group of more than 
400 IT professionals and report 

to the CEO. Caddell will join Waste | 
Management from Yellow Tech- 
nologies Inc. in Overland Park, 
Kan., where she has served as 
president since November 1999. 
Caddell holds a bachelor’s degree 
in history from Jacksonville Uni- 
versity and a master’s degree in 
systems engineering from the 
University of Arizona. She also 
completed an executive education 
program at Harvard University. 
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‘The Case for 


Il Leasing 


O LEASE OR NOT TO LEASE? That’s 
the question facing many IT executives 
today as they grapple with justifying the 
expense of technology investments. 

All indications are that corporate capital 
commitments are on the upswing, especially in the 
area of IT purchases. With interest rates rivaling those 
of the 1960s, there’s a strong temptation to buy new 
hardware and software. But how wise is it to purchase 


the new technology? Rapid 
obsolescence of technology 
is a serious problem, espe- 
cially for companies that 
have a strategic need to 
keep pace with changing 
technology. Such large cap- 
ital expenditures require a 
major cost-justification ef- 
fort and make it harder for 
companies to conserve 
working capital. 

When a business pur- 
chases computer equip- 
ment, the typical financial 
assumption is that the equipment has 
a five-year life span. It becomes a capi- 
tal asset of the company that depreci- 
ates in value over the five-year period. 
After three years, 40% of the equip- 
ment’s value is still on the company’s 
books, but there’s little technological 
value left in it. This value gap is the 
key reason for interest in IT leasing. 

Operating leases are quite attractive 
for IT because they treat computer 
hardware and software as expense 


NORBERT J. KUBILUS is a 
CIO partner at Tatum 
Partners in San Diego. 
He can be contacted at 
Norbert. Kubilus® 
tatumpartners.com. 


items, like a company does for com- 
modities such as disks and printer pa- 


per. The short-term monthly cost of IT 


leasing is always significantly less than 
that of borrowing the money to buy 
the equipment. For the same comput- 
ers worth the same amount, over the 
same term and for the same down pay 
ment, monthly lease expenses will be 


30% to 60% lower than 
loan payments, even at to- 
day’s best interest rates. 

During the first three to 
five years of the equip- 
ment'’s life, the overall cost 
of leasing compared with 
buying is approximately 
the same, assuming the fi- 
nancing deal in each case 
runs the same length of 
time and the company sells 
the equipment at the end 
of the loan. 

Some lease-vs.-buy com- 


| parisons show that buying costs slight- 


ly less than leasing does, but this is 
based on the bad assumption that pur- 
chased equipment will return full mar- 
ket value if it’s sold or traded at the 
end of the loan. 

While there is a secondary market 
for used computer equipment — just 
look on eBay — it takes time and effort 
to obtain full market value when dis- 
posing of computers by the hundreds 
or thousands. The hassles of manag- 
ing obsolescence and disposal will 
make leasing seem a lot more 
favorable. The leasing company 
assumes both risks. 

The CIO should look for a properly 
structured leasing program that offers 
more than just cash-flow benefits and 
technology risk avoidance. A key fea- 
ture of such a program is effective as- 


set management. The leasing company 
owns the equipment and is responsi- 

le for maintaining the physical inven- 
tory for each piece of equipment on 
lease, including a description, serial 
number, asset tag number, acceptance 
date, installed location and lease ter- 
mination date. It also collects and pays 
sales taxes, use taxes and/or property 
taxes based on where the equipment 
is located. 

Leasing programs can be very cre- 
ative and customized. A typical pro- 
gram involves a master lease with 
schedules that permit timed acquisi- 
tion of equipment from multiple ven- 
dors. The phased acquisition could be 
especially useful for, say, a gradual 
rollout of point-of-sale systems at hun 
dreds of outlets around the country. 
Some leasing programs also incorpo- 
rate a lease line of credit that lets the 
CIO add hardware and software as 
needed and incorporate them into 
the program. 

From a return-on-investment per 
spective, the CIO can also use a mas- 
ter lease to fix per-seat costs on an on- 
going basis. This allows the CIO to 
keep the company at an appropriate 
level of technology for a predictable 
monthly cost that can be budgeted in 
advance. Also, services can be bundled 
into monthly lease payments. The 
master lease can cover upfront con 
sulting and training costs, as well 
as those for monthly support and 
maintenance. 

For ClOs who are convinced that 
hardware and software are commodi 
ties rather than capital assets, leasing 
makes more sense than ever. And the 
flexible and customized leasing op 
tions available today make it an even 
more attractive alternative. @ 45412 
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ogrammers, Software Engin- 
& Network/System Adm- 
design 
nm (1) MS 
ASP.NET. 
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SQL Serve 
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> anywhere 
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)0; database 


develop 
asses, develop 
Svc. for 
veb-based n-tier 
Visual 
ET, ASP, VB 
Acc 
0 ODBC, JAVA 
SCRIPT, VB.NET, HTML, D- 
HTML, on windows 95/98/NT. 
2000/XP. BS in Business/Com- 
puter Science or equivalent + 2 
yr. exp. in 
software 
ence in ASP.NET, C# 
COM +, XML, SQL 20) 
ployer will accept 5 yrs. software 
exp in lieu BS. Comp. sala- 
ries. Apply: Intermark, 1800 
interni. Park Dr # 500 
Birmingham, AL 35243 with 
proof of perm. w/k authzn. 


Senior Business Systems Ana- 
lyst to analyze complex financial 
business systems and subsys- 
tems installed in an IBM DB/DB2 
or other similar Oracle or Sy- 
base environment using devel- 
opment tools such as Powerbuil- 
der, MQ Series, CICS 
PVCS, UNIX Scripts 
PFC, VB and PB Profil 
nsure that systems appl 
modules and systems are 
properly integrated with client 
servers and web based applica- 
tions and are capable of tran 
mitti data in various formats 
based on end user's require- 
ments in eal time environ- 
‘or documents 
cial business systems re- 
Juirements and writes functional 
technical specifications 
2ments and supports sys 
tems applications in a client 
server/web application enviror 
Requires Bachelor's De 
€ somputer and 
two years direct experience. Job 
location: Tampa, Florida nd 
resumes only no I 
Chery! Franz, Human Resour 
Officer, Household, Attr 
onal Human Resources 
HSBC Center, 25/F 
New York 14203 
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re existing methods 
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DNS 
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process us thread 
works, Windows SDK, Shel 
Perl < or 
uivalent d Computers 
gineering, Math or any relat- 
of study + 2 of relat. 
exp. 40 hrs/wk. Must have 
authority to work perma. 
the U.S. Contact HR 
Aster Telesolutions 
)53, Cherry St, Ste 103 
CA 94560 


esign & Develop 
software applications using 
Oracle, Erwin, XML, UML, C++ 
Interwoven, Coolgen, Clear- 
Case, ClearQuest, PVCS, UNIX 
Bachelors reqd in Computers 
Engineering, Math or any relat- 
ed field of study + 2 yrs of relat 
ed exp. 40 hrs/wk. Must have 
proof of legal authority to work 
permanently in the U.S. Send 
resume to HR_ Manager. 
Redsalsa Technologies, Inc 
14001,N. Dallas, Parkway, # 550 
Dallas, TX 75240 


RESEARCH PROGRAMMER 
University of Illinois at Chicago 


Administer UNIX, Windows NT 
and other servers used for 
teaching; programming; provide 
instructional technology consult- 
ing to faculty; help develop tech: 
nology-based courses and teach 
ymputer seminars and work 

The applicant should 

helor's Degree in 

> Science or related 
field, and have teaching experi- 
ence. The successful candidate 
should have two years of com- 
bined experience in Windows 
NT, and UNIX system adminis- 
tratior Webmaster ex rence. 
programming in HTML, Perl and 
C, and have experience in 


teaching, course development 


and using mputer and 
logy in e 


PL/SQL 
multimedia 
are a 
resume 
Mint Simagrai 
omputing and 


1940 


verseeir 


simultaneo 
5 taneou: 


Jsiness ustomer 
40hrs/wk. Send res- 
Itr. to Jane Higgins. 


Street. N 
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trade processing concepts re 
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me 
Java Perl 
Messaging, Rouge Wave 
Windows NT, Unix, Sybase 
distributed 
M-F, 40) 
Wachovie 
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NC 28288-0958. No 


PROG. ANALYST 
ORACLE FINANCIALS 


Dvip customized appins to 
Oracle Financials software 
package Upgrade patch 
releases & test to client specs 
Integrate with 
Relationship Mgmt appins like 
Siebel. MS degree in Comp 

MIS or Comp. Engnrg + 5 
yrs exp. in job offered or in 
Software Engnrg w/Oracle 
Financials reqd. 40 hrs/wk, OT 
as reqd, 8am - 5pm, $66,730/yr. 
Qualified applicants please sub- 
mit resume to Manager, Butler 
County CareerLink, Puliman 
Commerce Center, 112 
Hollywood Drive, Suite 101 
Butler, PA 16001-5699. Please 
refer to Job Order No. WEB 
400015. 


Customer 


aeclacro eR eoyen 


IT Technical Lead, Wachovia 
Corp. Charlotte, NC. Lead IT 
team that develops, creates, and 
modifies computer applications. 
Oversee budget preparation and 
track IT project expenses 
Regs. MA in Computer Science. 
Prod. or Mechanical Eng. and 2 
years of exp. in the pos. offered 
or as a Software Engineer or 
Computer Programmer. The 2 
years must incl. working w. 
check imaging and online bank- 
ing systems using internet tech 

flogies such as JAVA 
WebSpher iPlanet and UNIX 
and must have included manag- 
ing an IT projects with a budget 
in excess of $1 million 
40hrs/wk, Send resume & cvr 
Itr. to Jane Higgins, 401 S. Tryon 
Street, NC 0958, Charlotte, NC 
28288. No phone c: please 


SENIOR SOFTWARE ENGIN- 
EER to design, develop and te 
ion software anc 
web-based GUIs for the telecom. 
munication industry using Object 
Oriented programming 
niques, Java, Serviets, Ap 
EJB, JSP, J2EE, D in Paterns. 


Script 
DCOM under Windows NT/95/¢ 
2000/XP, HP-UX, Sur 


ir 
offered or as a Program 


mer/Analyst or Programmer. Ex- 


tensive travel on assignment t 


client 


salary offer 


Williamson Lane 


Attn: Jot 


PROGRAMMER: Convert to 
flow charts for coding: devel- 
op & write programs: program 
& maintain websites. Req 
Bachelor's in IT. (employer 
will accept foreign degree 


equiv. or equiv. in exp. or any 


comb. of edu./exp.) Resume 
anta Retailers Assoc. LLC 
0 Buckeye Rd. # 698 


Atlanta, GA 30341 


Software Engineer: Dsgn. & 
devip. supply chain ntwrk. soft 
Plan & dsgn. SAP R/3 soft. w 
APOimplem. to opti 2 cost & 
profit based supply chain syst 
onsid. asset utiliz 

Invivs. demand plar 

interf., creation of plan 

books, SNP build plan 

nt of master data 

R/3, live cache & 

onfig. Work could 

tic. locs. across the 

are Bach. Deg. in Comp. Sci. or 
Comp. Eng.+ 2 yrs. exp. 40 
hrs./wk. $80,000/yr. Submit 
resume to the Career Link at 
1855 New Hope St., Norristown 
PA 19401and ref. job order 
#WEB401097 


Software Engineers needed 
to dvip, test, impimnt s/ware 
applics using Java, J2EE 
EJB, C++, DHTML, XML 
XSLT, Struts, JSP, Shell 
Scripting, Oracle, TCP/IP, 
SONET, SS7 X/Moiif 
SilkTest, WinRunner, & Purify 
on Windows & UNIX. Send 
resume to: Global Consul- 
tants, Attn: Hireme, 8800 
Grand Oaks Cir #100, Tampa, 
FL 33637 
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Software Engineer for Tewks- 
bury, MA based developer of 
software products for J2EE web 
applications, portlets and web 
services. Requires Bachelor of 
Science degree in Computer 
Science, Computer Engineering 
or related area and one (1) year 
experience in object oriented 
design of web-based ware 
plications using Java, JSP. 
XML and relational databases 
including configuring production 
deployment environments, con 
ducting software requirement 
analysis, performing unit testing 
Jeveloping software QA 
processes, creating product and 
technical doc entation and 
providing customer support. The 
position is located in Tewksbury 
travel. Send 
N eet 
s as, Ad C 
200 Ames Pond D 
Tewksbury, MA 01876 


stems Software Engineer: 

sponsible for research 
esign, develop & test oper- 
ating systems software 
Translate clients’ require- 
ments into Urdu language 
for overseas engineers. Re- 
quire: BS in Computer 
Science/Engineering + 2 
years of exp. Send resume 
to: Memory4Less, Inc., 2622 
W. Lincoln Ave #104 
Anaheim, CA 92801, Attn 
HR Mgr or fax to: 714-8: 
3361 


yst needed 


applications 


on XML based 


m 
Mm ge 


K&M So ‘ for pro- 
jrammer/system oft 
sroject engineers or IT 

sionals. Both entry & experi- 
nced levels needed. Some 
positions require travel. Skills in 
C/++, VB, Java, Oracle, SAP, 
SQL are plus. Please send 
resumes to Recruit@kmsof 
tech.com. EOE 


Software engineers/system ana- 
lysts wanted by AS! DataMyte. 
Candidates must have BS with 
min one-yr exp to develop GUI 
and server database systems 
Skills in VC++, Java, VB, Oracle 
preferred. We offer competitive 
wage with full benefit. Apply at 
hr@asidatamyte.com. EOE. No 


calls 


Project Leader. Corning Incor- 
porated in Corning, NY, seeks 
Project Leader to develop and 
support information technology 
business, manufacturing and 
quality systems for science and 
technology organization. Re- 
quires Bachelor's degree in Infor- 
mation Management, Computer 
Science, Engineering or related 
field and relevant experience 
including management of IT- 
related projects, programming 
languages such as Java, C. C++ 
Visual Basic of HTML and appli 
cation development using rela- 
tional databases such as Oracle 
MS SQL Server or MS Access 
To apply please forward your 
resume to stoneer@corning.com 
and reference opening 9543 
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Senior Developers needed 
Seeking qualified candidates 
possessing MS or equiv. and: 
tel. work exp. Degree must 
include coursework in Object 
Oriented Programming 
Modern Operating Systems 
related Job duties inclu 
Research, design and d 
software systems. 

de’ feasible 

tions for busin 

and operatior 
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systems 


ware syster 


LOCATED 


CITY T. Ma 


DB2 Cl 
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only. Send resume to Workforce 
Development Programs, P.O 
Box 46547, Denver, CO 80202 
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Puzzled? 


itcareers.com 
can solve the 
labyrinth of 
job hunting by 
matching the 
right IT skills 
with the right 
IT position. 
Find out more 
at: 


www.itcareers.com 
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Project Manager, Alpharetta 
Manage deployment process 
incl. design, development, coor. 
dination & maintenance of data 
anagement system for collec 
tion of field data from remote 
locations & for client billing pur 
poses; coordinate data to be 
accessed by clients via corpo- 
rate website & 2 mated 
account inquiries; manage inte- 
yration ¢ cording equipment 
to client ons; document 
technical requirements neces 
sary for redesign of systems 
Lead small internal development 
r foreign 
field + 4 yrs in job 
Manager - Data 
Systems (ar 
Send resume 
1455 Alderman 


Alpharetta, GA 30005 


Biostatistician 
The Medica 2ge of Wiscon- 
Biostatistician 
The biostatistician position is 


1 is seek 


responsible for providing statist: 
analysis and programming 
for research projects. 
Jates must pos 
Master 

Computer Science 
iformatics, as 
rior work 
experience as a computer soft 
ware professional and knowl 
edge of bioinformatics analysis 
tools, UNIX, Matlab, C++, FOR 
TRAN, and statistical analysis 
packages SAS, S-Plus or SYS 
TAT. Interested applicants 
please provide a resume and a 
cover letter with salary require- 
ments to: Medical College of 

Ww Attn: Employm 
Offi JMC0322, 8701 Water 
town Plank Rd., Milwaukee, WI 
53226, Fax: 414-456-651 


Corporate Computer Services 
(CCS) has multiple openings 
for System/Programmer An 
alysts, S/W Engineers, both 
entry & experienced levels 
(minimum BS). Skills in C/C++ 
VB, Oracle are plus. We are 
small but we do not lay off 
Attractive wage w/ benefits. 
Apply HR@ccsiusa.net. EOE 


ShellSoft seeks IT profession 
als (programmer/system ana 
lysts, software engineers), pro- 
ject en-gineers. Our minimum 
requirement is BS. Good skills 
using Oracle, VB, SAP, SQL 
Java, C/C++ preferred. Some 
position requires travel. Please 
send resume t s@shell 


com 
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(AS RNIF 1.1 Web/Apps. on 
Servers (WebLogic, Net dynam 
ics, Apache - Tomcat, Jboss) in 
various OS. Send resume to 
Attn: Position 101/2004, 66 
Perimeter Center East, Ste. 600 
Atlanta, GA 30346. EOE 
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enhance teach no iearr 
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Nn Management 
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Requires Bachelor's 
Information Manager 
puter Scier 


j field and relev 
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SQL Server or NV 
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Java 

HTML 
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ng, NY, see 
Systems Analyst t 
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modifying exist 
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larify fF 
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Respond by resume 
Whittle, McData 
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field, CO 80021 
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Mae Baetoa es 


Principal (IT Professional) need- 
ed for management consulting 
and information technology ser- 
vices company located in Lake 
Forest, IL. Job duties include 
Analyze, design, develop, imple 
ent id provide end user sup- 
port for computer applications 
for clients located throughout the 
US. Provide sustaining engi 
y systems with 
and web-based 
Develop 
databases using 
Sybase. U: 
GUI, Java, and 
such as Genesys 


ome 


gineer wante 


SQL, PL 

SQL Server 7.0 & Oracle 9i. Min 
BS with 3-yr exp. using Sun One 
tech, Apache Tomcat, iPlanet 
Application server Contact h 


nuventive.com. No calls 


4exium, inc. is a new IT compa: 
ny. It has openings for software 
engineers, web developers, sys 
tem analysts. Qualified cz 
ave BS with st 
ce in ASP Net 
Travel may required 
apply at humanre 
E 


SAP Basis Administrator to 
plement and administer a mu 
ain multi-user SAP sy 
by developing related security 
procedures ynfiguration of 
SAP with multiple RDBMS, de 
veloping landscape client proce 
dures and implements SAP 
change controls inch or 
rection and transportation sys 
tems for system performance 
timization of site to site con 
ectivity. Requires Bachelor's 
Degree in Computer Science. 
Software Engineering, or Electri 
jineering and one year 
direct experience. Send resum 
es only alls, to: Carl 
Guenther, Corio ¢ 
Bryn Mawr Ave 
Rosemor i 60018 


Systems Analysts: Design. 

develop accntng./financial 

apps conforming with 

FASB in Oracle Financials 

Suite, Oracle RDBMS & 

related 

Reports 

loper/Discoverer 

Notes in various OS. Travel! 
sites 


Resume to 3100 Brec 


Careers@Varite.com 


IT Manager - Circulation 


The Seattle Times is seeking a seasoned IT Manz 
daily operations and strategic planning 
ment. This position is responsible for devel 


nce effo' 


vendors 
mplemer 
Dusiness 
be a ke 


Qualified 


seatt! 


st.resumes@seattletimes.com or send to: The Seattle Times 
Employment / JOB#03-251 PO Box 70 Seattle, WA 98111 


work 


and 


diagrams te 
lem analysis 


ommendations 


instruction manuals 


the establishment and f 

tems. Will review exist 

tional sy s for cost é€ > a MVS 

* Project Managers 

and flexit ac * Technical Architects 

tor to lower level syst r * Project Leads 

* Sr. Progrommer/ 
Analysts 

* Associate Consultant 


ness, com ce tec 


ysts and may lead 
ects. Requirements 
degree mputer S 
related field 
experience 

two (2 

related 


oftware 





Kanbay 


www.kanbay.com 


world.com), fax 
or mail (Steve 
Technologies, 1 
Pike, Suite 103 


15017 











sys- 

must include 

DHTML, Java 
exp. may 

2 or after comple 

Must also have 

wiAWT 

JSP, 


ftware t for broad 
nment ndustry 
Sun Java Prog- 
artification, & must b 
> 8i DBA certifi - 
ling to trav 
the US. Provide 
software dev't & 
Jatabase admin 


towards 


existing 

ertainment 

3 & main 

a, Serviets, Applets 
Swing, JSP, XML, HTML 
JavaScript, ASP, & 


ode & administer bott 


test, im 
custom 


Services, Labor 
19 Staniford 
MA 02114 
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Database Administrator (Indiana 
Waltham, MA): re 

Jatabase manage- 

& production 

expertise with 

data collection 


hoot fun 
shoot func 


database 
trans 

at 

jrades, mar 
sources, perform 
backups, imple 
ntegrity controls 
work 


sal 


$QL*Forms 
Jracle & database 
& reporting sys 


achelors de. 


or in posi 
\formation 

management systems, including 
r with inForm. Must have un- 
horization to work in 

5:30 p.m 


opies 
Case# 2002( 
n of Career Servi 
Certification Unit, 19 Staniford 
1st Floor, Boston, MA 02114 


lite Computing Systems a 
Cedar Rapids, lowa Company is 
seeking qualified computer pro- 

ssionals. Current positions 
available m neet the follow- 
r re > All positions 

quire at least a Bachelors 
degree year fgn Bachelor 
Ve 
positions 


Jegrees are acceptable). V 


may have 
ailable in add e ones 
listed. Multiple positions are like- 
y available in some positions 
>andidate's salary offered rela- 
to experience and skills 
andidates must be willing to 
relocate and travel as needed 
A variety of positions are avail 
bie, which require between 1-5 
2ars of experience the 
below-listed skills. Certain posi- 
tions may require a Maste 


degree 


* Java, HTML, XML, Weblogic or 
Websphere 
* Expeditor, IDMS, DB2 
ERP (e.g. SAP, Peoplesoft or 
Oracle Apps 
* Visual Basic, SQL, ASP.net 
SQL Server 
* Easytreive, QMF, Cobol, C 
SAS, TSO/ISPF 
*C, C++, GUI, Oracle or 
Informix or Sybase 


Please send resume and cover 
letter to: Raj Inani, President 
Infinite Computing Systems 

230 2nd Street le 214 
Cedar Rapids, lA 52401 


al Expert Req 

o's deg. (or equivalent 

> in Comp. Sci., Info. Sys 
or MIS & 5 years’ exp. in the job 
or 5 years’ exp. in the 

of full lifecycle of MS 
Exchange or Active Dir ory 
deployment from initial planning 
through final implemen. All stat- 
ed exp. must include MS 
Exchange or Active Directory 
rollouts to 20 or more seats 
with at least 15 sites; and the 
use of Visual Basic Scripting for 
Active rectory or LDAP 
(Lightweight Directory Access 
Protocol). Manage the full lifecy- 
cle of MS Exchange and Active 
Directory deployment projects 
from initial planning through final 
mplementation. Serve as tech- 
nical advisor and chief architect 
nf Saging and Active 
Directory projects, including 
messaging system consolida- 
implementation, & migra- 

tion. Apply with resume to: Joe 
Borcover, Wellpoint Health 
Networks Inc., 21555 Oxnard 
loodiand Hills, CA 


SENIOR DATABA ADMINIS- 
TRATOR to administer, design 
and support MS SQL Server 
databases and database objects 
using Enterprise Manager 
Query Analyzer and 
Analyze, design and st 
Sybase ASA abases and 
jatabase objects us Sybase 
Central and Dbisq > data 
bases for optimum performance 
using SQL Profiler and relation 
2 ting 


Yesign and develop stored pro 


nd perform  troubleshc 


edures, triggers ar 

using T-SQ 

data manipulation 

Server using T-SQL 

SQL Server backup and re 
protocols; Provide techr 
yort and training t 
artments. Rec 

degree ( omple’ 

requireme n Compt 

Science, or a closely rela’ 

field with 1 yr of exp in the jot 

offered or as a Database 

Analyst Experience gained 

before or after completing the 
icational requirement will be 

accep! Extensive travel on 

assignment to various c 

sites within the U.S. is required 

Competitive salary offered 

Send resume to: Lisa Patz, The 

CBORD Group, Inc., 61 Browr 

Road, Ithaca, NY 1485 

Job AK. EEO 


SENIOR PROGRAMMER/ANA 
LYST to analyze, design, devel- 
op, test, implement and support 
application software in a client 
server environment using C 
C++, Java, CORBA and Visual 
Basic under UNIX and Windows 
operating systems. Require 
B.S. degree in Computer S 
ence, an Engineering discipline 
or a closely related field with 2 
yrs of exp in the job offered or as 
a Softw Engineer. Extensive 
travel on assignment to various 
client sites within the U.S. is 
required. Competitive salary 
offered. Send resume to: Roz L 
Alford, ASAP Staffing LLC, 3885 
Holcomb Bridge Rd., Norcross 
GA 30092; Attn: Job AC 


We seek exp'd Bioinformatics 
Software Engineer 
analysis, library design, virtual 
screening, structure based drug 
design, rationalization and pre- 
diction of structure-activity 
trends, etc. using Rational XDE 
SWT, RequisitePro, Java 
M.S. or B.S. C/S 
or Bioinformatics reqd 
Send resumes _ only to 
Paramount Software Solutions. 
Inc., 3350 Riverwood Pkwy 


Ste.1900, Atlanta, GA 30339 


3 Systems Analyst positions 
Must have B.S. or Foreign 
equivalent in Computer Science. 
Computer Management or relat: 
ed. Must have 4 yrs. of experi- 
ence in job offered or 4 
experience Software Engin 
Software Progra 
Jate is responsi 
arting data from pro 
ations and 
ability and proce: 
work flow 


docume ssiness and 
engineering analysis, math mod 


els, comp 


iter ages. 

data bases; res 3 quest 

of programming, data input 
rements, ar 

controls. 

cal flow 


maintaining 
preparing reports 

Nstructor manuals and training 
users; and analyzing, reviewi 
and rewriting programs 
ncrease operating efficiency or 
adapting programming to new 
requirements. Frequent Trave' 
Required. Must have 4 years of 
experience Oracle 8x/S 
C,C++,VC #, COM/DCON 
PL/SQL, Pro*C, ASP, ASP.net 
and TCP/IP Sockets. Qualified 
applicants must send resume to 
VSoft Corporation Ss 
Viswanathan, 6455 East Johns 
Crossing, 450, Duluth, GA 
30097 


IT Professionals 


Seeking q fied car 
dates for Sr. & mid-level IT 
professional positions in- 
cluding: Programmer An- 
alysts, Database Admins. 
Software Engineers, IT. 
Software & similar ty 
positions Candidates 
must possess MS/BS or 
equivalent &/or related 
work exp. Mail resume & 
references to 


Patel Consultants Corp. 
Attn: HR 
1525 Morris Ave 
Union, NJ 07083 EOE 


Systems Administrator to trou 
bleshoot software issues, data 
base administration, for Finan- 
cial and ERP systems. Provide 
implementation support for One 
World HTML, XPI and write 
JAVA code for XPI adapters 
Perform maintenance tasks for 
software to update with daily 
hanges in the system. Maintain 
web based interface of ERP sys- 
tems. Bachelors degree in 
Computer Science, Information 
Systems or Mathematics and 2 
years experience. Send resume 
to Bellsoft, inc. 8770 W. Bryn 
Mawr Ave., Suite 1300, Chicago. 


IL, 60631 


Where The 
Best 
Get Better! 


Wwww.itcareers.com 
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Lace backer ec Receyenl 


Software engineer to design 
elop and test computer pro- 
s for business applications 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper 
tise in Fireworks, MSMQ, VB 
NET and Visual Studio .NET. 
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Send resume to 5200 Vineland 
Road, Suite 200, Orlando 
Florida 32811, Attention: Laurie 
Mooty. 
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Continued from page 1 


Amtrak — 


aren't screened against any 
DHS terrorist watch-list data- 
base. 

Amtrak declined to com- 
ment on what, if any, security 
measures beyond bomb-sniff- 
ing dogs have been deployed 
to protect the rail system. 

But technology and security 
analysts said there are IT- 
based systems available today 
that can substantially improve 
Amtrak’s security in the near 
term without having a nega- 
tive impact on passenger 
movement and convenience. 

For example, a $4,000-per- 
camera license from Reston, 
Va.-based ObjectVideo can 
provide security managers 
with software that lets them 
set rules for detecting suspi- 
cious behavior using existing 
security cameras. The compa- 
ny just last month signed a 
distributor agreement with 


Continued from page 1 


Risk Index. 


firmed that the GSC is work- 
ing on delivering the frame- 
work and said it will be avail- 
able by this summer. 

All of the Big Four account- 
ing firms were unable to pro- 
vide comments on their par- 
ticipation by press time. 

“(The RPI] will allow third- 
party auditors to come in and 
make a judgment as to wheth- 
er or not you are complying 
with established cybersecurity 
practices,” explained Larry 
Clinton, chief operating offi- 
cer at the Internet Security Al- 
liance. ISA members that 
score above a certain level on 
the RPI could qualify for low- 
er insurance rates. 

The Arlington, Va.-based 
ISA is a collaborative effort 
between the T Coordina- 
tion Center at Carnegie Mel- 
lon University in Pittsburgh 
and the Electronic Industries 


Madrid-based IT Deusto, and 
the Madrid metro system is 
now planning a pilot project 
using the software. Since the 
attacks in Spain, a demonstra- 
tion of the technology during 
a U.S. embassy-sponsored 
technology expo scheduled 
for next month in Madrid has 
been sold out, according to 
ObjectVideo CEO Raul Fer- 
nandez. 

“The problem with large 
closed-circuit television infra- 
structures is there are a lot of 
cameras, but nobody's watch- 
ing them,” said Fernandez. 
“That’s where technology 
comes in.” Had ObjectVideo’s 
software been deployed in 
Madrid, it would likely have 
been able to detect the bomb- 
ers leaving backpacks behind 
and would have automatically 
dispatched security personnel 
to investigate, he claimed. 

For remote areas of the U.S. 
rail system, Axis Communica- 
tions Inc., a Lund, Sweden- 
based surveillance firm, has 


Alliance, a federation of trade 
associations. 

Robert A. Parisi Jr., senior 
vice president and chief un- 
derwriting officer for AIG’s 
eBusiness Risk Solutions 
group, said he wasn’t aware 
of the specifics of the arrange- 
ment with the ISA. But ISA 
members assessed by means 
of tools such as the RPI will be 
viewed as “highly desirable 
risks and ones that we want 
to price in a highly competi- 
tive fashion because we view 


When you 

have all of the 
big accounting firms 
applying a certain 
standard, it carries 
a certain amount of 
weicht. 
ROBERT A. PARISI JR., 


AIG INTERNATIONAL INC.’S 
EBUSINESS RISK SOLUTIONS GROUP 


developed a “network camera” 
system that can be operated 
over a company’s existing IT 
infrastructure or the excess 
fiber-optic cable that typically 
runs alongside U.S. railroad 
corridors. 

Fredrik Nilsson, CEO of 
Axis, agreed that most securi- 
ty cameras aren’t monitored. 
“You need to have enough 
intelligence built in so that 
the cameras that are being 
watched are the ones monitor- 
ing areas where something is 
happening,” he said. 

The company has integrated 
video motion-detection tech- 
nology into each network cam- 
era and can combine time- 
stamped recordings with phys- 
ical security events to give se- 
curity managers “context,” 
said Nilsson. Alerts can then 
be sent in the form of text 
messages to cell phones or e- 
mails with images attached. 

“But kids spray-paint and 
disable security cameras all 
the time,” said Ken Barney, a 


them as doing the right thing,” 
Parisi said. 

‘This is an attempt to come 
up with a kind of universally 
agreed upon set of values and 
benchmarks that can be ap- 
plied across industries” for 
measuring a company’s ex- 
posure to cyber risk, Parisi 
said. “When you have all of 
the big accounting firms ap- 
plying a certain standard, it 
carries a certain amount of 
weight,” he added. 

The relative lack of broadly 
applicable quantitative risk- 
measurement tools for the 
critical infrastructure and for 
enterprise IT has been a long- 
lamented issue among securi- 
ty professionals. 

There are standards such as 
the ISO 7799, ISO 1799 and 
those from the National Insti- 
tute of Standards and Technol- 
ogy that are currently used by 
organizations as benchmarks 
and assessment frameworks. 
But there are few widely 
accepted standards that are 


AMTRAK claims to have beefed up 
electronic monitoring of bridges 
FRO a RUE Cue Lund 
the Madrid terrorist attacks.  * 


transportation security con- 
sultant at Plano, Texas-based 
Electronic Data Systems Corp. 
“So the other way to do it is to 
place a forward-looking sen- 
sor on the vehicle to look 
ahead.” Barney said that 
adding an alert mechanism 
similar to the General Motors 


comparable to the generally 
accepted accounting princi- 
ples and generally accepted 
auditing standards that audi- 
tors in the financial services 
industry are able to use, Parisi 
said. “At the moment, there re- 
ally isn’t an equivalent to that 
when it comes to information 
security.” 


Formidable Challenges 
Developing a framework such 
as the RPI is highly desirable 
but could be a huge challenge, 
users said. For one thing, it’s 
extremely hard to model risk 
when it comes to cybersecuri- 
ty, said Robert Garigue, chief 
information security officer at 
Bank of Montreal. 

“When we are looking at 
events and the predictability 
of good or bad outcomes in 
cyberspace, we don’t have 
much historical data to look 
at,” Garigue said. It becomes 
extremely hard, for instance, 
to predict with any kind of va- 
lidity the number of virus at- 
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Corp. OnStar system used in 
automobiles would be easy to 
do immediately and would 
provide a critically needed 
alert mechanism for emergen- 
cies in remote regions. 

Barry Ptashkin, a railroad 
security analyst at EDS, said 
networked forward-looking 
sensors or track sensors that 
include GPS- and RFID-based 
tracking systems could help 
improve security in the near 
term. While those technol 
ogies are widely used by 
freight trains, they’re not typi- 
cally in use for passenger 
trains, Ptashkin said. 

“Once this data is capture 
it can be integrated into a uni- 
form format and brought into 
a data warehouse that would 
give quick indicators of high- 
risk areas or key performance 
indicators and patterns that 
require investigation,” said 
Ptashkin. “Even if it’s limited, 
it’s important to just start the 
concept and keep it moving.” 


© 45590 


tacks that might take place 
over the next year, especially 
in an environment where the 
technology and application in- 
frastructure are changing so 


rapidly, he said. 


It is very difficult to do be- 


cause every network is differ- 
ent,” said Dennis Treece, di- 
rector of corporate security at 
the Massachusetts Pert Au- 
thority in Boston. 

Mergers, acquisitions, up- 
grades and a lack of standards 
in purchasing over the years 
have contributed to a situa 
tion that makes quantifiable 
risk assessment difficult, 
[reece said. “It is nearly im- 
possible to make any valid as- 
sumptions beyond ‘We're a 
Microsoft shop’ or ‘We're 
mostly switched’ or the like,” 
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Kickstart 


ORRYING ABOUT RFID? Now’s a good time for it. 
Really. And not just because the topic of radio fre- 
quency identification tags is hovering like a dark 
cloud over your IT shop. Last week at the big 
CeBIT trade show in Hanover, Germany, dozens 
of vendors were showing RFID-related products — including cell 
phone maker Nokia, which announced an add-on kit for people who 
want to use their Nokia phones to read RFID tags. 
Which means RFID is now officially mainstream. And learning 
RFID on the cheap is now officially practical. 


And considering how much some companies 
are likely to spend on RFID over the next few 
years, cheap is a very attractive price. 


Face it: Right now RFID is probably a mystery 


to you and your IT staff. Oh, you may have read 
a few articles on RFID. You may even have seen 
demonstrations. But for all you know, the arti- 
cles are wrong and the demos are rigged. 

Unless you’re already hip-deep in an RFID 
implementation — because Wal-Mart or Target 
or Albertsons or the Defense Department has 
set a 2005 deadline for you to put RFID tags on 
every pallet and carton you ship their way — 
you and your people don’t know RFID. 

And you should. You know that. If you make 
or move any kind of product, eventually you'll 
need to start building some RFID expertise. But 
there’s only one way to do that: Put RFID tech- 
nology in the hands of your IT staff and let 
them kick it around. 

But usually there’s a nasty trade-off. If you 
bring in a technology early in its life cycle, your 
staff gets the maximum exposure and the most 
time to figure it out. Unfortunately, early on is 
when any new technology is likely to be most 
expensive. 

You can wait until the price 
comes down. But then you could 
find yourself racing to meet a man- 
date that customers or your CEO 
has set for getting that technology 
up and running — and making all 
your early mistakes against a hard 
deadline. That gets expensive, too. 

But right now, there’s a sweet spot 
for RFID. You've still got time — 


RFID Inc. in Aurora, Colo. For $750 or less, you 
get an RFID reader, sample RFID tags, software 
— pretty much everything your techies need to 
start getting comfortable with this stuff. 

No, it’s not enough to do a pilot project. 
Think of this as the prepilot stage, when your 
staff can try out RFID, experiment with it, kick 
the tires and get a real gut-level sense of how it 
works and what it can do. 

And you can most likely pay for it all out of 
petty cash. 

Of course, those RFID products at CeBIT are 
a sign of what’s to come. By the end of the year, 
we'll be awash in RFID-enabled devices. Wait 
another six months and you'll see RFID reach- 


ing all the way down into consumer products — 


cell phones, handhelds computers, plug-and- 
play PC peripherals. Ordinary people, or at 
least tech-savvy hobbyists, will be making and 
scanning their own RFID tags. The sweet spot 
will have gotten sweeter. 
But if you wait, you’ve lost that head start. 
You’ve lost something else, too. For the past 
few years, the people in your IT department 
have been grinding away. The hours have been 
long, the layoffs have been depressing, and, 
with no money for new projects in 
the budget, the technology hasn’t 
exactly been exciting. 
Now you’ve got an opportunity 
to remind them that there’s a fu- 
ture for them in your IT shop. A 


future with challenging technology. 


A future that will require honing 


old skills and developing new ones. 


A future you want them to get 
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Better Safe Than Sorry, Right? 


Virus invades the network at this real estate agency's 
main site, so IT consultant pilot fish advises discon- 
necting the agency's remote office. Fish cleans up 
main office, then heads for the other site - and finds a 
baffled staff. “We got the message to disconnect, but 
we didn’t know exactly what to disconnect, so we dis- 
connected everything,” office manager says. And it 
takes fish all night to reconnect every network cable, 
mouse, keyboard, monitor and power cord. 


Aha! 

Nurse at this 
state hospital 
tells support 
nilot fish that 
she’s getting a strange 
error message on her 
PC. Fish immediately di- 
agnoses the problem: 
“It’s the monitor's ‘no 
signal’ message,” he 
tells the nurse. “All you 
have to do is turn the 
computer on.” “You 
mean the box thingy that 
sits on the floor?” she 
replies. “You guys took 
that away yesterday to 


Just Trying to 
Cooperate 

User says his PC is act- 
ing strangely, closing 
some applications and 
opening others on its 
own. Support pilot fish 
can’t detect a virus or 
any other problem with 
the PC, despite returning 
to the user’s desk sever- 
al times. But user keeps 
complaining about it. “I 
was in early one morn- 
ing, so | went to check 
that PC before anyone 
arrived,” says fish. “To 
my surprise, | found re- 


frigerator magnets stuck | 


all over the machine. 

When confronted, the 
user said he took them 
off when | came down 
because I had told oth- 
ers not to put magnets 


SHARK iste 
TANK 


: use, but she calls this IT 
: help desk pilot fish every 
: half hour for three 

: weeks. Turns out she’s 

: not good at doing any- 

: thing else either, and 

: soon she’s gone. Four 

: months later, fish’s 

: phone rings with a caller 
: asking questions about 

: software that fish’s 

; company doesn’t even 

: use. “It was the temp,” 
fix some other problem.” : 
: now temping at a local 

: university, but she called 
: the one number she 

: knew could help her.” 


: And Thanks for 

: Your Support 

: ClO tasks pilot fish with 
: doing risk assessment 
: On a major project, and 
: biggest risks: The proj- 
? ect sponsor is ineffec- 
: tive, and the project 


Temp claims 
she’s well 
versed in PC 


groans fish. “She was 


FEED THE SHARK! Send your true tales of IT life to 


and RFID starter technology has 
gotten cheap. 

Right now you can buy RFID 
evaluation kits from companies like 
SkyeTek Inc. in Boulder, Colo., and 


ready for. 

Don’t waste that opportunity. 
Quit worrying about RFID and 
start doing something about it now 
— on the cheap. @ 45552 


sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 


frank_hayes@computerworld.com. 
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IBM Express Middleware: Designed 
and developed for midsize companies. 


(IBM muscle for less moolah.) 


MIDDLEWARE IS POWERFUL IBM SOFTWARE. The kind of software that n 
your business problems. It's an answer. It's IBM DB2° Lotus’ Tiv k 
r for midsize businesse 








